{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-16T22:09:45.075","vulnerabilities":[{"cve":{"id":"CVE-2024-20445","sourceIdentifier":"psirt@cisco.com","published":"2024-11-06T17:15:14.830","lastModified":"2026-01-05T14:57:31.500","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device.\r\n\r\nThis vulnerability is due to improper storage of sensitive information within the web UI of Session Initiation Protocol (SIP)-based phone loads. An attacker could exploit this vulnerability by browsing to the IP address of a device that has Web Access enabled. A successful exploit could allow the attacker to access sensitive information, including incoming and outgoing call records.\r\nNote: Web Access is disabled by default."},{"lang":"es","value":"Una vulnerabilidad en la interfaz de usuario web de los teléfonos de escritorio Cisco de la serie 9800, los teléfonos IP de la serie 7800 y 8800 de Cisco y el teléfono con video Cisco 8875 podría permitir que un atacante remoto no autenticado acceda a información confidencial en un dispositivo afectado. Esta vulnerabilidad se debe al almacenamiento inadecuado de información confidencial dentro de la interfaz de usuario web de las cargas de teléfonos basadas en el protocolo de inicio de sesión (SIP). Un atacante podría aprovechar esta vulnerabilidad navegando hasta la dirección IP de un dispositivo que tenga habilitado el acceso web. Una explotación exitosa podría permitir al atacante acceder a información confidencial, incluidos los registros de llamadas entrantes y salientes. Nota: el acceso web está deshabilitado de forma predeterminada."}],"metrics":{"cvssMetricV31":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}]},"weaknesses":[{"source":"psirt@cisco.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:desk_phone_9841_firmware:3.1\\(1\\):-:*:*:*:*:*:*","matchCriteriaId":"9B9A280D-810C-4EC8-BB95-CBD973110119"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:desk_phone_9841_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*","matchCriteriaId":"3BF40685-7470-42B3-BA19-9E5E76853E24"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:desk_phone_9841:-:*:*:*:*:*:*:*","matchCriteriaId":"8176E19D-B625-4891-9018-F42228F1266B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:desk_phone_9851_firmware:3.1\\(1\\):-:*:*:*:*:*:*","matchCriteriaId":"CC1BAF58-DF67-431A-B5C6-B49D3F36058A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:desk_phone_9851_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*","matchCriteriaId":"E8E088EE-4F58-4FE4-BE3F-BA98DEADD9CC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:desk_phone_9851:-:*:*:*:*:*:*:*","matchCriteriaId":"713F43A6-745A-4DAB-AD2D-3139E9E5C1A0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:desk_phone_9861_firmware:3.1\\(1\\):-:*:*:*:*:*:*","matchCriteriaId":"02ACF18D-978D-442C-A374-EEE596958199"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:desk_phone_9861_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*","matchCriteriaId":"8C927E10-6C67-4D51-8520-8373289BCCF3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:desk_phone_9861:-:*:*:*:*:*:*:*","matchCriteriaId":"A8D01D5F-4EAE-4547-AB41-44F7885491C0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:desk_phone_9871_firmware:3.1\\(1\\):-:*:*:*:*:*:*","matchCriteriaId":"B184E05F-7160-4B31-9ABD-612E56077869"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:desk_phone_9871_firmware:3.1\\(1\\):sr1:*:*:*:*:*:*","matchCriteriaId":"4FBDDB5F-78B3-4AF7-A42A-423B1107EE5C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:desk_phone_9871:-:*:*:*:*:*:*:*","matchCriteriaId":"3D14CF47-7581-40E5-91A1-AC6BB5137358"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"EB40CA0C-A980-476E-BFD5-2DE8A11CC89E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_conference_phone_7832:-:*:*:*:*:*:*:*","matchCriteriaId":"6592E7FE-346E-4923-97C2-F5298DC802A3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_conference_phone_8831_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"19D86855-2FE2-4BC0-AD23-42F459E9AE2A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_conference_phone_8831:-:*:*:*:*:*:*:*","matchCriteriaId":"71D931AB-034B-4061-9156-039010ECB648"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"ACBAA5BB-BF05-4FDE-B719-BF527F584608"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_conference_phone_8832:-:*:*:*:*:*:*:*","matchCriteriaId":"F1010D16-DC6E-47A6-8BF9-C1026D975E3D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_7811_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"7C71D54E-2D4A-4AA7-8E93-33214794B0B2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*","matchCriteriaId":"D7260C17-7067-47AD-995F-366A5E8B10E7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_7821_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"4D27D332-69A3-4CFF-AE61-AAA6B31FAFC1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*","matchCriteriaId":"AE7AFFF0-5B21-400B-B923-E9B7FCCE08FA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_7841_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"A2072265-6A36-4DB7-8722-C288AFA695FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*","matchCriteriaId":"73CF8A50-11BD-4506-BF2A-CCA36BF59EFF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_7861_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"8D70C616-D775-41EB-BC7D-113F817B22EA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*","matchCriteriaId":"E52C420C-FD54-4BE4-8720-E05307D53520"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"371ABCD4-DF50-4815-B02C-38D0505874FD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*","matchCriteriaId":"D0CC3127-3152-4906-9FE0-BC6F21DCADAA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8841_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"E0C291D5-EEF2-4CEF-9C2D-E4F067AEE5A5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*","matchCriteriaId":"7944CC9C-AE08-4F30-AF65-134DADBD0FA1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8845_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"50A18EDF-71F8-4B26-B5E7-1742831695E4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*","matchCriteriaId":"A313E64A-F43C-4FBA-A389-6171CBD709C0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8851_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"0C56F335-2124-4806-8F30-9C67367BB44D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*","matchCriteriaId":"8AF6DC5E-F582-445E-BF05-2D55A0954663"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8851nr_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"9D47B048-D47B-45E1-BD25-C19A6B7CC55A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8851nr:-:*:*:*:*:*:*:*","matchCriteriaId":"23BB2274-7668-4B80-9FF2-EC724C44685B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3\\(1\\)","matchCriteriaId":"196320B1-DC92-4D24-A34F-C1287B8382BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*","matchCriteriaId":"090EE553-01D5-45F0-87A4-E1167F46EB77"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:video_phone_8875_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.3\\(1\\)","matchCriteriaId":"C76337A0-E138-4227-A0F1-9CF635EECC14"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:video_phone_8875_firmware:2.3\\(1\\):-:*:*:*:*:*:*","matchCriteriaId":"41019D10-27B9-4DA6-9DF3-780D0A7EE75C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:video_phone_8875_firmware:2.3\\(1\\):sr1:*:*:*:*:*:*","matchCriteriaId":"690E8866-FF2F-4C72-8510-1E587B535A42"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:video_phone_8875:-:*:*:*:*:*:*:*","matchCriteriaId":"CC9019DD-6941-42F3-8B66-1F3CDDDA86E7"}]}]}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-infodisc-sbyqQVbG","source":"psirt@cisco.com","tags":["Vendor Advisory"]}]}}]}