CVE-2024-20376
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an...
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.5
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
- Record
CVE-2024-20376- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2024-18091
7.5
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
- Record
EUVD-2024-18091- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fvx9-q8pv-wxv9
7.5
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an...
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
- Record
GHSA-fvx9-q8pv-wxv9- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
7.5
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
- Record
CVE-2024-20376- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
Affected products
- cisco ip phones with multiplatform firmware
- cisco phoneos
- cisco ip phone 6821 with multiplatform firmware
- cisco ip phone 6825 with multiplatform firmware
- cisco ip phone 6841 with multiplatform firmware
- cisco ip phone 6851 with multiplatform firmware
- cisco ip phone 6861 with multiplatform firmware
- cisco ip phone 6871 with multiplatform firmware
- cisco ip phone 7811 with multiplatform firmware
- cisco ip phone 7821 with multiplatform firmware
- cisco ip phone 7832 with multiplatform firmware
- cisco ip phone 7841 with multiplatform firmware
Show 10 moreShow less
- cisco ip phone 7861 with multiplatform firmware
- cisco ip phone 8800 series with multiplatform firmware
- cisco ip phone 8811 with multiplatform firmware
- cisco ip phone 8832 with multiplatform firmware
- cisco ip phone 8841 with multiplatform firmware
- cisco ip phone 8845 with multiplatform firmware
- cisco ip phone 8851 with multiplatform firmware
- cisco ip phone 8861 with multiplatform firmware
- cisco ip phone 8865 with multiplatform firmware
- cisco video phone 8875 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-20376 is a high vulnerability (CVSS 7.5) in Cisco Ip Phones With Multiplatform Firmware, published May 1, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.88%, the 59th percentile. No source names a fixed version.