A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.
Metrics
Affected Vendors & Products
References
History
Fri, 08 Nov 2024 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
kev
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2020-04-15T20:10:11.570472Z
Updated: 2024-11-08T16:11:35.635Z
Reserved: 2019-12-12T00:00:00
Link: CVE-2020-3161
Vulnrichment
Updated: 2024-08-04T07:24:00.645Z
NVD
Status : Modified
Published: 2020-04-15T20:15:15.097
Modified: 2024-11-21T05:30:27.190
Link: CVE-2020-3161
Redhat
No data.