{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-14T18:30:26.255","vulnerabilities":[{"cve":{"id":"CVE-2020-3161","sourceIdentifier":"psirt@cisco.com","published":"2020-04-15T20:15:15.097","lastModified":"2025-10-28T13:57:48.327","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition."},{"lang":"es","value":"Una vulnerabilidad en el servidor web de Cisco IP Phones, podría permitir a un atacante no autenticado remoto ejecutar código con privilegios root o causar una recarga de un teléfono IP afectado, resultando en una condición de denegación de servicio (DoS). La vulnerabilidad es debido a una falta de comprobación de entrada apropiada de las peticiones HTTP. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP diseñada al servidor web de un dispositivo apuntado. Una explotación con éxito podría permitir a un atacante ejecutar código remotamente con privilegios root o causar una recarga de un teléfono IP afectado, resultando en una condición DoS."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV30":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2022-05-03","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability","weaknesses":[{"source":"psirt@cisco.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8865_firmware:10.3\\(1\\)es14:*:*:*:*:*:*:*","matchCriteriaId":"F84C7842-0D6A-4950-AC9B-63602140BAF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8865_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"144FA4D4-61A7-454F-9373-F91548E4B8AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8865_firmware:11.0\\(5\\)sr1:*:*:*:*:*:*:*","matchCriteriaId":"85C8430D-496C-44CA-AA95-6448F3459373"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*","matchCriteriaId":"BB99B9AB-64B5-4989-9579-A1BB5D2D87EF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8851_firmware:10.3\\(1\\)es14:*:*:*:*:*:*:*","matchCriteriaId":"5800EBC5-4C54-46E9-B742-A49EE6D57A32"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8851_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"BB5548D1-7E70-4E75-B0FC-FC390B858612"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8851_firmware:11.0\\(5\\)sr1:*:*:*:*:*:*:*","matchCriteriaId":"07844DC0-2E7A-4540-897D-C4E2B440C4EB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*","matchCriteriaId":"8AF6DC5E-F582-445E-BF05-2D55A0954663"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_7841_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"1617D281-505F-49D2-AAAB-91D61F7D4797"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*","matchCriteriaId":"73CF8A50-11BD-4506-BF2A-CCA36BF59EFF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_7821_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B552853A-14E0-4339-A87E-7AE00BF143EA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*","matchCriteriaId":"AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8811_firmware:10.3\\(1\\)es14:*:*:*:*:*:*:*","matchCriteriaId":"8260121F-1819-40ED-A3CC-86A98B84CF13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8811_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"2404681B-34F2-4F60-AE8B-1A41E2FCFB68"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8811_firmware:11.0\\(5\\)sr1:*:*:*:*:*:*:*","matchCriteriaId":"D7BDE345-B411-4A8B-A6A6-A031C52E2844"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*","matchCriteriaId":"D0CC3127-3152-4906-9FE0-BC6F21DCADAA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8861_firmware:10.3\\(1\\)es14:*:*:*:*:*:*:*","matchCriteriaId":"D1350005-A1E5-4794-B853-9DB3494C3B78"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8861_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F5E2CDC1-4031-4F88-94C2-4AA7AC112D87"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8861_firmware:11.0\\(5\\)sr1:*:*:*:*:*:*:*","matchCriteriaId":"228ADA90-87B0-4BBF-A7CB-ABDC2509E5A7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*","matchCriteriaId":"090EE553-01D5-45F0-87A4-E1167F46EB77"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8845_firmware:10.3\\(1\\)es14:*:*:*:*:*:*:*","matchCriteriaId":"363E47B4-E22B-4A8A-92CD-1ACDB2CF6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8845_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B41E93DB-62E6-4AFB-8C72-44C51E1CB1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8845_firmware:11.0\\(5\\)sr1:*:*:*:*:*:*:*","matchCriteriaId":"16218F2F-0889-437D-A8C4-EFC7C197C19A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*","matchCriteriaId":"A313E64A-F43C-4FBA-A389-6171CBD709C0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_7861_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5E2460C9-F9C8-4436-BD8E-3FDD8978E8C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*","matchCriteriaId":"E52C420C-FD54-4BE4-8720-E05307D53520"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8841_firmware:10.3\\(1\\)es14:*:*:*:*:*:*:*","matchCriteriaId":"B73D3CF0-E2A3-4A76-82D8-3C899B41BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8841_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"E719FD30-98C0-4582-8ED5-DDBA01CCC055"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8841_firmware:11.0\\(5\\)sr1:*:*:*:*:*:*:*","matchCriteriaId":"6528A512-7359-4F95-9BD4-0083524F9125"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*","matchCriteriaId":"7944CC9C-AE08-4F30-AF65-134DADBD0FA1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_7811_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"6D715BDD-D977-4581-BA09-A2936991CFA7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*","matchCriteriaId":"D7260C17-7067-47AD-995F-366A5E8B10E7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8821_firmware:10.3\\(1\\)es14:*:*:*:*:*:*:*","matchCriteriaId":"AA6858D1-20BC-417A-9328-196798A23B48"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9E4622EF-D5CA-4971-A3A7-0610C136F160"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8821_firmware:11.0\\(5\\)sr1:*:*:*:*:*:*:*","matchCriteriaId":"2740B39B-ADD1-4CD9-BEF8-FFBDEA1567F0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8821:-:*:*:*:*:*:*:*","matchCriteriaId":"36C99E0B-0383-4CB3-B325-EC0F3D57D39D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8821-ex_firmware:10.3\\(1\\)es14:*:*:*:*:*:*:*","matchCriteriaId":"A3783AE8-6B80-4DC4-8525-84E63D50DAAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8821-ex_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"FFC9FAB0-B9A7-476A-AAF0-A4B14FC48CF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8821-ex_firmware:11.0\\(5\\)sr1:*:*:*:*:*:*:*","matchCriteriaId":"E6745422-3CE4-41A0-A87E-BD9C5DA45BF2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8821-ex:-:*:*:*:*:*:*:*","matchCriteriaId":"EE56B858-B59D-4197-9B2A-33A03908B967"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:8831_firmware:10.3\\(1\\)es14:*:*:*:*:*:*:*","matchCriteriaId":"9F731586-5715-45FA-AB4D-7301D15DFB60"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:8831_firmware:11.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"188DB874-2611-4919-A2E0-A955852AB424"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:8831_firmware:11.0\\(5\\)sr1:*:*:*:*:*:*:*","matchCriteriaId":"DAD76AAB-7FD9-4F31-87C2-899128A1943E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:8831:-:*:*:*:*:*:*:*","matchCriteriaId":"BE2514A1-486C-40F7-8746-56E2B973CBE6"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/157265/Cisco-IP-Phone-11.7-Denial-Of-Service.html","source":"psirt@cisco.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voip-phones-rce-dos-rB6EeRXs","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/157265/Cisco-IP-Phone-11.7-Denial-Of-Service.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voip-phones-rce-dos-rB6EeRXs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3161","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}}]}