Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:ip_phone_8845_firmware:11.5\(1\):*:*:*:*:*:*:*

part: o version: 11.5(1) update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductIp Phone 8845 Firmware (87fa6a9a-6c70-535d-83d3-514f2b8cc95d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-20968 vulnerable 2026-06-08 05:39:58.515522 Details available
HIGH (8.1)
A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent attacker to cause a stack overflow on an affected device. This vulnerability is due to insufficient input validation of received Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol traffic to an affected device. A successful exploit could allow the attacker to cause a stack overflow, resulting in possible remote code execution or a denial of service (DoS) condition on an affected device.
Published: 2022-12-08T16:13:11.258Z
Updated: 2024-08-03T02:31:58.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1922 vulnerable 2026-06-08 05:13:30.041036 Cisco IP Phone 7800 and 8800 Series Session Initiation Protocol Denial of Service Vulnerability
MEDIUM (5.3)
A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to insufficient validation of input Session Initiation Protocol (SIP) packets. An attacker could exploit this vulnerability by altering the SIP replies that are sent to the affected phone during the registration process. A successful exploit could allow the attacker to cause the phone to reboot and not complete the registration process.
Published: 2019-07-06T01:25:11.206Z
Updated: 2024-11-21T19:19:37.597Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.