CVE-2024-20376

State: Published
Severity: 7.5 High
Published: May 1, 2024
Updated: Aug 1, 2024
Reserved: Nov 8, 2023

Description

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	cisco

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
Cisco IP Phones with Multiplatform FirmwareCisco	11.3.1 MSR2-6Affected 11.3.1 MSR3-3Affected 11.3.2Affected 11.3.3Affected 11.3.1 MSR4-1Affected 11.3.4Affected 11.3.5Affected 11.3.3 MSR2Affected 11.3.3 MSR1Affected 11.3.6Affected 11-3-1MPPSR4UPGAffected 11.3.7Affected 11-3-1MSR2UPGAffected 11.3.6SR1Affected 11.3.7SR1Affected 11.3.7SR2Affected 11.0.0Affected 11.0.1Affected 11.0.1 MSR1-1Affected 11.0.2Affected 11.1.1Affected 11.1.1 MSR1-1Affected 11.1.1 MSR2-1Affected 11.1.2Affected 11.1.2 MSR1-1Affected and 22 more versions
Cisco PhoneOSCisco	1.0.1Affected 2.1.1Affected 2.0.1Affected 2.3.1Affected

Product

Versions

Cisco IP Phones with Multiplatform FirmwareCisco

11.3.1 MSR2-6Affected
11.3.1 MSR3-3Affected
11.3.2Affected
11.3.3Affected
11.3.1 MSR4-1Affected
11.3.4Affected
11.3.5Affected
11.3.3 MSR2Affected
11.3.3 MSR1Affected
11.3.6Affected
11-3-1MPPSR4UPGAffected
11.3.7Affected
11-3-1MSR2UPGAffected
11.3.6SR1Affected
11.3.7SR1Affected
11.3.7SR2Affected
11.0.0Affected
11.0.1Affected
11.0.1 MSR1-1Affected
11.0.2Affected
11.1.1Affected
11.1.1 MSR1-1Affected
11.1.1 MSR2-1Affected
11.1.2Affected
11.1.2 MSR1-1Affected
and 22 more versions

Cisco PhoneOSCisco

1.0.1Affected
2.1.1Affected
2.0.1Affected
2.3.1Affected

References

cisco-sa-ipphone-multi-vulns-cXAhCvS

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.