{"id":"CVE-2020-3161","aliases":["EUVD-2020-24432","GHSA-74vv-6p4c-8fhj"],"status":"published","title":"Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability","description":"A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.83855,"percentile":0.99692,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2020-04-15T20:10:11Z","modified":"2026-06-17T03:17:31Z","kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2021-11-03"},{"source":"kev","since":"2021-11-03"}],"exploits":[{"source":"exploitdb","id":"EDB-48342","title":"Cisco IP Phone 11.7 - Denial of service (PoC)","type":"dos","platform":"hardware","date":"2020-04-17","url":"https://www.exploit-db.com/exploits/48342"},{"source":"pocgithub","id":"abood05972/CVE-2020-3161","title":"abood05972/CVE-2020-3161","date":"2020-12-31","url":"https://github.com/abood05972/CVE-2020-3161"}],"products":[{"vendor":"cisco","product":"8831_firmware"},{"vendor":"cisco","product":"cisco ip phone"},{"vendor":"cisco","product":"cisco ip phones"},{"vendor":"cisco","product":"ip_phone_7811_firmware"},{"vendor":"cisco","product":"ip_phone_7821_firmware"},{"vendor":"cisco","product":"ip_phone_7841_firmware"},{"vendor":"cisco","product":"ip_phone_7861_firmware"},{"vendor":"cisco","product":"ip_phone_8811_firmware"},{"vendor":"cisco","product":"ip_phone_8821-ex_firmware"},{"vendor":"cisco","product":"ip_phone_8821_firmware"},{"vendor":"cisco","product":"ip_phone_8841_firmware"},{"vendor":"cisco","product":"ip_phone_8845_firmware"},{"vendor":"cisco","product":"ip_phone_8851_firmware"},{"vendor":"cisco","product":"ip_phone_8861_firmware"},{"vendor":"cisco","product":"ip_phone_8865_firmware"}],"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voip-phones-rce-dos-rB6EeRXs","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/157265/Cisco-IP-Phone-11.7-Denial-Of-Service.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3161","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-3161"},{"url":"https://github.com/advisories/GHSA-74vv-6p4c-8fhj"}],"sources":{"cve":[{"id":"CVE-2020-3161","title":"Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability","description":"A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.","status":"published","published":"2020-04-15T20:10:11.57Z","modified":"2025-10-21T23:35:45.888Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:51.923913Z"}],"euvd":[{"id":"EUVD-2020-24432","description":"A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.","status":"published","published":"2020-04-15T20:10:11Z","modified":"2025-10-21T23:35:45Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2021-11-03","updated_at":"2026-11-02T20:31:24.816637Z"}],"ghsa":[{"id":"GHSA-74vv-6p4c-8fhj","title":"A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote...","description":"A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.","status":"published","published":"2022-05-24T17:15:13Z","modified":"2025-10-22T00:31:53Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:04:04.176931Z"}],"kev":[{"id":"CVE-2020-3161","title":"Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability","description":"Cisco IP Phones contain an improper input validation vulnerability for HTTP requests. Exploitation could allow an attacker to execute code remotely with root privileges or cause a denial-of-service (DoS) condition.","cwes":["CWE-20"],"kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:17.050017Z"}],"nvd":[{"id":"CVE-2020-3161","description":"A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.","status":"published","published":"2020-04-15T20:15:15.097Z","modified":"2026-06-17T03:17:31.293Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:05:59.125695Z"}]}}