CVE-2024-20357

State: Published
Severity: 5.9 Medium
Published: May 1, 2024
Updated: Aug 1, 2024
Reserved: Nov 8, 2023

Description

A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device.

Scores

CVSS	Score	Vector	Source
3.1	5.9 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N	cisco

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
Cisco IP Phones with Multiplatform FirmwareCisco	11.3.1 MSR2-6Affected 11.3.1 MSR3-3Affected 11.3.2Affected 11.3.3Affected 11.3.1 MSR4-1Affected 11.3.4Affected 11.3.5Affected 11.3.3 MSR2Affected 11.3.3 MSR1Affected 11.3.6Affected 11-3-1MPPSR4UPGAffected 11.3.7Affected 11-3-1MSR2UPGAffected 11.3.6SR1Affected 11.3.7SR1Affected 11.3.7SR2Affected 11.0.0Affected 11.0.1Affected 11.0.1 MSR1-1Affected 11.0.2Affected 11.1.1Affected 11.1.1 MSR1-1Affected 11.1.1 MSR2-1Affected 11.1.2Affected 11.1.2 MSR1-1Affected and 22 more versions
Cisco PhoneOSCisco	1.0.1Affected 2.1.1Affected 2.0.1Affected 2.3.1Affected

Product

Versions

Cisco IP Phones with Multiplatform FirmwareCisco

11.3.1 MSR2-6Affected
11.3.1 MSR3-3Affected
11.3.2Affected
11.3.3Affected
11.3.1 MSR4-1Affected
11.3.4Affected
11.3.5Affected
11.3.3 MSR2Affected
11.3.3 MSR1Affected
11.3.6Affected
11-3-1MPPSR4UPGAffected
11.3.7Affected
11-3-1MSR2UPGAffected
11.3.6SR1Affected
11.3.7SR1Affected
11.3.7SR2Affected
11.0.0Affected
11.0.1Affected
11.0.1 MSR1-1Affected
11.0.2Affected
11.1.1Affected
11.1.1 MSR1-1Affected
11.1.1 MSR2-1Affected
11.1.2Affected
11.1.2 MSR1-1Affected
and 22 more versions

Cisco PhoneOSCisco

1.0.1Affected
2.1.1Affected
2.0.1Affected
2.3.1Affected

References

cisco-sa-ipphone-multi-vulns-cXAhCvS

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.