GSD-2020-3161
Record from circl · Published June 9, 2016
A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco IP phone | * |
Timeline
- Jun 9, 2016 CVE Published
- Nov 8, 2021 PoC Published (5 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GSD-2020-3161
vulnetix vdb fixes GSD-2020-3161Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GSD-2020-3161/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart