VDB
CNVD-2020-31998
CNVD-2020-31998
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Cisco IP Phone 7811等都是美国思科(Cisco)公司的一款IP电话。 多款Cisco产品的Web server中存在输入验证错误漏洞,该漏洞源于程序未能对HTTP请求进行正确的输入验证。攻击者可借助特制HTTP请求利用该漏洞以root权限执行代码或造成拒绝服务。
Risk Scores
CVSS v3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco IP phone | n/a |
Timeline
- Jun 9, 2016 CVE Published
- Nov 8, 2021 PoC Published
- Nov 20, 2021 PoC Published
- Dec 24, 2024 PoC Published
- Feb 23, 2025 PoC Published
- Feb 2, 2026 PoC Published