Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:ip_phone_6825_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductIp Phone 6825 Firmware (7411db06-515d-5ee0-853a-571be13edd98)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20079 vulnerable 2026-06-08 05:52:38.853883 Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
CRITICAL (9.8)
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2023-03-03T00:00:00.000Z
Updated: 2024-10-28T16:33:33.489Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20078 vulnerable 2026-06-08 05:52:38.851177 Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
CRITICAL (9.8)
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2023-03-03T00:00:00.000Z
Updated: 2024-10-28T16:33:46.026Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-20774 vulnerable 2026-06-08 05:39:54.711010 Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability
MEDIUM (6.8)
A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based interface of an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform configuration changes on the affected device, resulting in a denial of service (DoS) condition.
Published: 2022-04-06T18:12:26.733Z
Updated: 2024-11-06T16:28:57.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16008 vulnerable 2026-06-08 05:13:07.522928 Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Scripting Vulnerability
MEDIUM (5.4)
A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based GUI of an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Published: 2020-01-26T04:45:30.615Z
Updated: 2024-11-15T17:44:17.675Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.