Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2989▼ 87 respecto a la semana anterior
Críticas / altas1458▲ 97 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (6.5) | 0.33% | — | Cisco IP Conference Phone 7832 FirmwareCisco IP Conference Phone 7832 With Multiplatform FirmwareCisco IP Conference Phone 8832 FirmwareCisco IP Conference Phone 8832 With Multiplatform Firmware+30 | 18/11/2024 | 17/6/2026 | Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are due to… | |
| Analizada | Media (4.8) | 0.28% | — | Cisco Desk Phone 9841 With Multiplatform FirmwareCisco Desk Phone 9851 With Multiplatform FirmwareCisco Desk Phone 9861 With Multiplatform FirmwareCisco Desk Phone 9871 With Multiplatform Firmware+19 | 6/11/2024 | 17/6/2026 | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users. This vulnerability exists because the… | |
| Analizada | Media (4.8) | 0.28% | — | Cisco Desk Phone 9841 With Multiplatform FirmwareCisco Desk Phone 9851 With Multiplatform FirmwareCisco Desk Phone 9861 With Multiplatform FirmwareCisco Desk Phone 9871 With Multiplatform Firmware+19 | 6/11/2024 | 17/6/2026 | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users. This vulnerability exists because the… | |
| Analizada | Alta (7.5) | 0.81% | — | Cisco IP Phone 6821 With Multiplatform FirmwareCisco IP Phone 6841 With Multiplatform FirmwareCisco IP Phone 6851 With Multiplatform FirmwareCisco IP Phone 6861 With Multiplatform Firmware+11 | 1/5/2024 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected… | |
| Analizada | Alta (7.5) | 0.88% | — | Cisco Video Phone 8875 FirmwareCisco IP Phone 6821 With Multiplatform FirmwareCisco IP Phone 6841 With Multiplatform FirmwareCisco IP Phone 6851 With Multiplatform Firmware+14 | 1/5/2024 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability… | |
| Analizada | Media (5.9) | 0.50% | — | Cisco IP Phone 6871 With Multiplatform FirmwareCisco IP Phone 7811 With Multiplatform FirmwareCisco IP Phone 7821 With Multiplatform FirmwareCisco IP Phone 7832 With Multiplatform Firmware+14 | 1/5/2024 | 17/6/2026 | A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML… | |
| Modificada | Media (6.5) | 0.33% | — | Cisco Video Phone 8875 FirmwareCisco IP Phone 6821 With Multiplatform FirmwareCisco IP Phone 6825 With Multiplatform FirmwareCisco IP Phone 6841 With Multiplatform Firmware+19 | 16/8/2023 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management interface of an affected system. This… | |
| Modificada | Media (6.8) | 0.30% | — | Cisco IP Phone 8800 FirmwareCisco IP Phone 8800 Series With Multiplatform FirmwareCisco IP Phone 8811 FirmwareCisco IP Phone 8811 With Multiplatform Firmware+11 | 22/7/2021 | 17/6/2026 | The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment (TEE) of an affected device. This, for example, affects certain Cisco IP Phone and Wireless IP Phone… | |
| Modificada | Alta (8.8) | 3.1% | — | Cisco IP Conference Phone 7832 FirmwareCisco IP Conference Phone 7832 With Multiplatform FirmwareCisco IP Conference Phone 8832 FirmwareCisco IP Conference Phone 8832 With Multiplatform Firmware+29 | 5/2/2020 | 17/6/2026 | A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when processing Cisco Discovery Protocol messages.… |