GCVE - cpe:2.3:h:cisco:ip_phone_6825:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:ip_phone_6825:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Ip Phone 6825 (`2ec988b7-77d7-5968-84ec-0fabb3ccb84e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20221`	not_vulnerable	2026-06-08 05:52:41.836030	Details available MEDIUM (6.5) A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management interface of an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform a factory reset of the affected device, resulting in a Denial of Service (DoS) condition. Published: 2023-08-16T21:01:05.872Z Updated: 2024-08-02T09:05:35.927Z Open on db.gcve.eu Reference links https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-csrf-HOCmXW2c	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20079`	not_vulnerable	2026-06-08 05:52:38.853899	Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities CRITICAL (9.8) Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2023-03-03T00:00:00.000Z Updated: 2024-10-28T16:33:33.489Z Open on db.gcve.eu Reference links https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20078`	not_vulnerable	2026-06-08 05:52:38.851724	Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities CRITICAL (9.8) Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2023-03-03T00:00:00.000Z Updated: 2024-10-28T16:33:46.026Z Open on db.gcve.eu Reference links https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-cmd-inj-KMFynVcP	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-20774`	not_vulnerable	2026-06-08 05:39:54.716319	Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability MEDIUM (6.8) A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based interface of an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform configuration changes on the affected device, resulting in a denial of service (DoS) condition. Published: 2022-04-06T18:12:26.733Z Updated: 2024-11-06T16:28:57.600Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voip-phone-csrf-K56vXvVx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-16008`	not_vulnerable	2026-06-08 05:13:07.523653	Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Scripting Vulnerability MEDIUM (5.4) A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based GUI of an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Published: 2020-01-26T04:45:30.615Z Updated: 2024-11-15T17:44:17.675Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200108-iphone-xss	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.