CVE-2023-20079 Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
Unauthenticated remote attackers can execute arbitrary code or cause denial of service on Cisco IP Phones via the web management interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-20079?
CVE-2023-20079 is a critical memory corruption vulnerability in Cisco IP Phones with Multiplatform Firmware, published on 3 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
Which versions are affected by CVE-2023-20079?
It affects 21 products.
Products include Cisco Ip Phone 6825 Firmware, Cisco Ip Phone 6841 Firmware, Cisco Ip Phone 6851 Firmware, Cisco Ip Phone 6861 Firmware, Cisco Ip Phone 6871 Firmware, Cisco Ip Phone 7811 Firmware and 15 more.
How do I fix CVE-2023-20079?
No fix has been published for CVE-2023-20079 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-20079 being exploited?
There is no known exploitation of CVE-2023-20079 in the wild and no public exploit code.
Other vulnerabilities in Cisco IP Phones with Multiplatform Firmware
Sources
Also known as GHSA-5mh2-xjxr-6c3g.