CVE-2021-1379

Published Nov 18, 2024

Last updated 4 months ago

CVSS medium 6.5

Overview

Description
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
Source
psirt@cisco.com
NVD status
Analyzed
Products
ip_conference_phone_7832_firmware, ip_conference_phone_7832_with_multiplatform_firmware, ip_conference_phone_8832_firmware, ip_conference_phone_8832_with_multiplatform_firmware, ip_phone_6821_with_multiplatform_firmware, ip_phone_6841_with_multiplatform_firmware, ip_phone_6851_with_multiplatform_firmware, ip_phone_6861_with_multiplatform_firmware, ip_phone_6871_with_multiplatform_firmware, ip_phone_7811_firmware, ip_phone_7811_with_multiplatform_firmware, ip_phone_7821_firmware, ip_phone_7821_with_multiplatform_firmware, ip_phone_7841_firmware, ip_phone_7841_with_multiplatform_firmware, ip_phone_7861_firmware, ip_phone_7861_with_multiplatform_firmware, ip_phone_8811_firmware, ip_phone_8811_with_multiplatform_firmware, ip_phone_8841_firmware, ip_phone_8841_with_multiplatform_firmware, ip_phone_8851_firmware, ip_phone_8851_with_multiplatform_firmware, ip_phone_8861_firmware, ip_phone_8861_with_multiplatform_firmware, ip_phone_8845_firmware, ip_phone_8845_with_multiplatform_firmware, ip_phone_8865_firmware, ip_phone_8865_with_multiplatform_firmware, unified_ip_conference_phone_8831_firmware, unified_ip_conference_phone_8831_for_third-party_call_control_firmware, wireless_ip_phone_8821_firmware, wireless_ip_phone_8821-ex_firmware, spa525g_firmware

Risk scores

CVSS 3.1

Type
Secondary
Base score
6.5
Impact score
3.6
Exploitability score
2.8
Vector string
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity
MEDIUM

Weaknesses

psirt@cisco.com
CWE-120

Social media

Hype score
Not currently trending

Configurations

Related CVEs

  1. A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of the web UI. This vulnerability exists because the web UI of an affected device does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Note: To exploit this vulnerability, the phone must be registered to Cisco Unified Communications Manager and have Web Access enabled. Web Access is disabled by default.•CVE-2025-20351
  2. A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to a buffer overflow when an affected device processes HTTP packets. An attacker could exploit this vulnerability by sending crafted HTTP input to the device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: To exploit this vulnerability, the phone must be registered to Cisco Unified Communications Manager and have Web Access enabled. Web Access is disabled by default.•CVE-2025-20350
  3. A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to perform arbitrary file writes to specific directories in the underlying operating system. Note: To exploit this vulnerability, Web Access must be enabled on the phone. Web Access is disabled by default.•CVE-2025-20335
  4. A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability exists because the product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. An attacker could exploit this vulnerability by sending a crafted packet to the IP address of a device that has Web Access enabled. A successful exploit could allow the attacker to access sensitive information from the device. Note: To exploit this vulnerability, Web Access must be enabled on the phone. Web Access is disabled by default.•CVE-2025-20336
  5. A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against users. This vulnerability exists because the web UI of an affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Note: To exploit this vulnerability, Web Access must be enabled on the phone and the attacker must have Admin credentials on the device. Web Access is disabled by default.•CVE-2024-20534

References

Sources include official advisories and independent security research.