Severity
High
Analysis Summary
CVE-2020-3161
Cisco IP Phones could allow a remote attacker to execute arbitrary code on the system, caused by improper input validation by the web server. By sending specially-crafted HTTP request, an attacker could exploit this vulnerability to execute arbitrary code with root privileges or cause a reload on the system.
Impact
- Code Execution
Indicators Of Compromise
CVE
- CVE-2020-3161
Affected Vendors
Cisco
Affected Products
Cisco IP Phone 7861
Cisco IP Phone 8851
Cisco IP Phone 8861
Cisco IP Phone 8865
Remediation
Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.