Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 0.61% | — | Cisco IP Phone 7800 FirmwareCisco IP Phone 7811 FirmwareCisco IP Phone 7821 FirmwareCisco IP Phone 7832 Firmware+18 | 20/1/2023 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability… | |
| Modificada | Media (6.8) | 0.30% | — | Cisco IP Phone 8800 FirmwareCisco IP Phone 8800 Series With Multiplatform FirmwareCisco IP Phone 8811 FirmwareCisco IP Phone 8811 With Multiplatform Firmware+11 | 22/7/2021 | 17/6/2026 | The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment (TEE) of an affected device. This, for example, affects certain Cisco IP Phone and Wireless IP Phone… | |
| Modificada | Alta (7.5) | 1.5% | — | Cisco IP Phone 8800 Firmware | 22/3/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software… | |
| Modificada | Media (6.5) | 1.4% | — | Cisco IP Phone 8821 FirmwareCisco IP Phone 8821-ex FirmwareCisco IP Conference Phone 8832 FirmwareCisco IP Phone 8800 Firmware | 22/3/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an authenticated, remote attacker to write arbitrary files to the filesystem. The vulnerability is due to insufficient input validation and file-level permissions. An attacker… | |
| Modificada | Alta (8.8) | 0.70% | — | Cisco IP Phone 8821 FirmwareCisco IP Phone 8821-ex FirmwareCisco IP Conference Phone 8832 FirmwareCisco IP Phone 8800 Firmware | 22/3/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. The vulnerability is due to insufficient CSRF protections for the web-based… | |
| Modificada | Alta (7.5) | 1.9% | — | Cisco IP Phone 8821 FirmwareCisco IP Phone 8821-ex FirmwareCisco IP Conference Phone 8832 FirmwareCisco IP Phone 8800 Firmware | 22/3/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to bypass authorization, access critical services, and cause a denial of service (DoS) condition. The vulnerability exists because the… | |
| Modificada | Crítica (9.8) | 3.1% | — | Cisco IP Phone 8821 FirmwareCisco IP Phone 8821-ex FirmwareCisco IP Conference Phone 7800 FirmwareCisco IP Phone 8800 Firmware+1 | 22/3/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code. The vulnerability exists because the… | |
| Modificada | Media (6.5) | 0.64% | — | Cisco IP Phone 8800 FirmwareCisco IP Phone 7800 FirmwareCisco IP Conference Phone 7832 FirmwareCisco IP Conference Phone 8832 Firmware+10 | 21/2/2019 | 17/6/2026 | A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service (DoS) condition. The… | |
| Modificada | Alta (7.5) | 3.3% | — | Cisco IP Phone 8800 FirmwareCisco IP Phone 7800 Firmware | 17/5/2018 | 17/6/2026 | A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to incomplete input… |