CVE-2020-3111

Description

A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when processing Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to the targeted IP phone. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.234

Associated Vulnerability

VulnerabilityOS Platform
Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability For Cisco Small Business IP PhonesNCM
Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability For Cisco SIP IP Phone SoftwareNCM
Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability For Cisco IP Phone 8800 SeriesNCM
Improper Input Validation Vulnerability (CVE-2020-3111)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1705095Security Update for Cisco Small Business IP Phones 7.6(2)SR6
PATCH-1705918Security Update for Cisco SIP IP Phone Software 11.7(1)MN19
PATCH-1705974Security Update for Cisco IP Phone 8800 Series 11.7(1)SC2

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234