CVE-2023-20079
Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
- Record
CVE-2023-20079- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2023-24258
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
- Record
EUVD-2023-24258- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5mh2-xjxr-6c3g
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could...
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
- Record
GHSA-5mh2-xjxr-6c3g- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
- Record
CVE-2023-20079- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-121, CWE-787
- Updated
- 2026-11-02
Affected products
- cisco ip phones with multiplatform firmware
- cisco ip phone 6825 firmware
- cisco ip phone 6841 firmware
- cisco ip phone 6851 firmware
- cisco ip phone 6861 firmware
- cisco ip phone 6871 firmware
- cisco ip phone 7811 firmware
- cisco ip phone 7821 firmware
- cisco ip phone 7832 firmware
- cisco ip phone 7841 firmware
- cisco ip phone 7861 firmware
- cisco ip phone 8811 firmware
Show 10 moreShow less
- cisco ip phone 8831 firmware
- cisco ip phone 8832 firmware
- cisco ip phone 8841 firmware
- cisco ip phone 8845 firmware
- cisco ip phone 8851 firmware
- cisco ip phone 8861 firmware
- cisco ip phone 8865 firmware
- cisco unified ip phone 7945g firmware
- cisco unified ip phone 7965g firmware
- cisco unified ip phone 7975g firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-20079 is a critical vulnerability (CVSS 9.8) in Cisco Ip Phones With Multiplatform Firmware, published March 3, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.3%, the 95th percentile. No source names a fixed version.