VDB
CVE-2020-3111
CVE-2020-3111
PUBLISHED
CVSS 8.800000190734863 HIGH
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.
EPSS 0.23% · 46.4th percentile
Risk Scores
CVSS 3.0
8.800000190734863
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.23%
46.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | unified_ip_conference_phone_8831_for_third-party_call_control_firmware | |
| cisco | ip_phone_7841_with_multiplatform_firmware | 0 |
| cisco | ip_phone_7861_firmware | 0 |
| cisco | ip_phone_6821_firmware | 0 |
| cisco | ip_phone_8861_firmware | 0 |
| Cisco | Cisco IP phone | * |
| cisco | ip_phone_6861_firmware | 0 |
| cisco | ip_phone_8851_with_multiplatform_firmware | 0 |
| cisco | ip_conference_phone_8832_firmware | 0 |
| cisco | ip_phone_7811_with_multiplatform_firmware | 0 |
| cisco | ip_conference_phone_7832_with_multiplatform_firmware | 0 |
| cisco | ip_phone_8861_with_multiplatform_firmware | 0 |
| cisco | ip_conference_phone_8832_with_multiplatform_firmware | 0 |
| cisco | ip_phone_8811_firmware | 0 |
| Cisco | IP Phone | |
| cisco | ip_phone_8845_firmware | 0 |
| cisco | unified_ip_conference_phone_8831_firmware | 0 |
| cisco | wireless_ip_phone_8821_firmware | 0 |
| cisco | ip_phone_8865_with_multiplatform_firmware | 0 |
| Cisco | N/A |
…and 18 more
Exploit Intelligence
Timeline
- Feb 5, 2020 CVE Published
- Feb 7, 2020 PoC Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-nxos-cdp-rce advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-voip-phones-rce-dos advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-iosxr-cdp-rce advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-ipcameras-rce-dos advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-fxnxos-iosxr-cdp-dos advisory
- http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html url
- https://nvd.nist.gov/vuln/detail/CVE-2020-3111 advisory