CVE-2021-1379

Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities

View on CVE.org

Published Nov 18, 2024 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Description

Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone.
These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco IP Phones with Multiplatform Firmware

unknown

Version	Status	Constraints
`11.1.2`	affected	—
`11.2.1`	affected	—
`11.2.3`	affected	—
`11.2.2`	affected	—
`11.2.3 MSR1-1`	affected	—
`11.1.2 MSR1-1`	affected	—
`11.1.1`	affected	—
`11.1.2 MSR3-1`	affected	—
`11.0.0`	affected	—
`11.1.1 MSR1-1`	affected	—
`11.0.1`	affected	—
`11.1.1 MSR2-1`	affected	—
`11.2.4`	affected	—
`11.0.1 MSR1-1`	affected	—
`11.0.2`	affected	—
`11.3.1`	affected	—
`11.3.1 MSR1-3`	affected	—
`11.3.2`	affected	—
`11.3.1 MSR2-6`	affected	—
`11.3.1 MSR3-3`	affected	—

Cisco

Cisco Session Initiation Protocol (SIP) Software

unknown

Version	Status	Constraints
`9.0(3)`	affected	—
`9.0(2)SR2`	affected	—
`9.0(2)SR1`	affected	—
`9.2(1)`	affected	—
`9.4(2)SR1`	affected	—
`9.4(2)`	affected	—
`9.4(2)SR2`	affected	—
`9.4(2)SR3`	affected	—
`9.3(1)SR2`	affected	—
`9.3(1)SR3`	affected	—
`9.3(1)SR1`	affected	—
`9.1(1)SR1`	affected	—
`9.3(1)SR4`	affected	—
`9.2(3)`	affected	—
`9.2(1)SR2`	affected	—
`9.3(1)`	affected	—
`9.4(2)SR4`	affected	—
`12.1(1)SR1`	affected	—
`11.5(1)`	affected	—
`10.3(2)`	affected	—
`10.2(2)`	affected	—
`10.3(1)`	affected	—
`10.3(1)SR4`	affected	—
`11.0(1)`	affected	—
`10.4(1)SR2 3rd Party`	affected	—
`11.7(1)`	affected	—
`12.1(1)`	affected	—
`11.0(0.7) MPP`	affected	—
`9.3(4) 3rd Party`	affected	—
`12.5(1)SR2`	affected	—
`10.2(1)SR1`	affected	—
`9.3(4)SR3 3rd Party`	affected	—
`10.2(1)`	affected	—
`12.5(1)`	affected	—
`10.3(1)SR2`	affected	—
`11-0-1MSR1-1`	affected	—
`10.4(1) 3rd Party`	affected	—
`12.5(1)SR1`	affected	—
`11.5(1)SR1`	affected	—
`10.1(1)SR2`	affected	—
`12.0(1)SR2`	affected	—
`12.6(1)`	affected	—
`10.3(1.11) 3rd Party`	affected	—
`12.0(1)`	affected	—
`12.0(1)SR1`	affected	—
`9.3(3)`	affected	—
`12.5(1)SR3`	affected	—
`10.3(1)SR4b`	affected	—
`9.3(4)SR1 3rd Party`	affected	—
`10.3(1)SR5`	affected	—
`10.1(1.9)`	affected	—
`10.3(1.9) 3rd Party`	affected	—
`9.3(4)SR2 3rd Party`	affected	—
`10.3(1)SR1`	affected	—
`10.3(1)SR3`	affected	—
`10.1(1)SR1`	affected	—
`12.0(1)SR3`	affected	—
`12.6(1)SR1`	affected	—
`12.7(1)`	affected	—
`10.3(1)SR6`	affected	—
`12.8(1)`	affected	—
`12.7(1)SR1`	affected	—
`11.0(2)SR1`	affected	—
`11.0(4)`	affected	—
`11.0(2)`	affected	—
`11.0(4)SR3`	affected	—
`11.0(5)`	affected	—
`11.0(3)SR2`	affected	—
`11.0(3)SR4`	affected	—
`11.0(3)SR3`	affected	—
`11.0(2)SR2`	affected	—
`11.0(4)SR1`	affected	—
`11.0(5)SR3`	affected	—
`11.0(3)`	affected	—
`11.0(5)SR2`	affected	—
`11.0(3)SR6`	affected	—
`11.0(5)SR1`	affected	—
`11.0(4)SR2`	affected	—
`11.0(3)SR1`	affected	—
`11.0(3)SR5`	affected	—

Cisco

Cisco Small Business IP Phones

unknown

Version	Status	Constraints
`7.4.8`	affected	—
`7.4.3`	affected	—
`7.5.5a`	affected	—
`7.3.7`	affected	—
`7.5.2`	affected	—
`7.5.1`	affected	—
`7.4.6`	affected	—
`7.5.7`	affected	—
`7.4.4`	affected	—
`7.6.2SR3`	affected	—
`7.6.2`	affected	—
`7.5.6`	affected	—
`7.5.6c`	affected	—
`7.6.0`	affected	—
`7.4.7`	affected	—
`7.6.2SR6`	affected	—
`7.5.2b`	affected	—
`7.5.5`	affected	—
`7.5.6a`	affected	—
`7.6.2SR2`	affected	—
`7.5.3`	affected	—
`7.5.2a`	affected	—
`7.5.6(XU)`	affected	—
`7.5.7s`	affected	—
`7.6.2SR4`	affected	—
`7.6.2SR1`	affected	—
`7.4.9`	affected	—
`7.5.5b`	affected	—
`7.6.2SR5`	affected	—
`7.5.4`	affected	—
`7.6.1`	affected	—
`7.6.2SR7`	affected	—

Configuration 1 [-]

AND

OR	cpe:2.3:o:cisco:ip_conference_phone_7832_firmware::::::::
	cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_conference_phone_7832:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

OR	cpe:2.3:o:cisco:ip_conference_phone_8832_firmware::::::::
	cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_conference_phone_8832:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_6821:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_6841:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_6851:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_6871:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_7811_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_7811_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_7821_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_7821_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_7841_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_7841_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_7861_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_7861_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8811_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8811_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8841_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8841_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8851_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8851_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8861_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8861_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8845_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8845_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8865_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8865_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

OR	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware::::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):-::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr1::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr2::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr3::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr4b::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr6::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_for_third-party_call_control_firmware:-:::::::*

cpe:2.3:h:cisco:unified_ip_conference_phone_8831:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:cisco:wireless_ip_phone_8821_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:wireless_ip_phone_8821:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:cisco:wireless_ip_phone_8821-ex_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:wireless_ip_phone_8821-ex:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:cisco:spa525g_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:spa525g:-:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2021-6846	Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

Metrics

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.328% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-rce-dos-U2PsSkz3
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-distupd-N87eB6Z3

History

Jan 6, 2026 5:45 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco ip Conference Phone 7832 Cisco ip Conference Phone 7832 Firmware Cisco ip Conference Phone 7832 With Multiplatform Firmware Cisco ip Conference Phone 8832 Cisco ip Conference Phone 8832 Firmware Cisco ip Conference Phone 8832 With Multiplatform Firmware Cisco ip Phone 6821 Cisco ip Phone 6821 With Multiplatform Firmware Cisco ip Phone 6841 Cisco ip Phone 6841 With Multiplatform Firmware Cisco ip Phone 6851 Cisco ip Phone 6851 With Multiplatform Firmware Cisco ip Phone 6861 Cisco ip Phone 6861 With Multiplatform Firmware Cisco ip Phone 6871 Cisco ip Phone 6871 With Multiplatform Firmware Cisco ip Phone 7811 Cisco ip Phone 7811 Firmware Cisco ip Phone 7811 With Multiplatform Firmware Cisco ip Phone 7821 Cisco ip Phone 7821 Firmware Cisco ip Phone 7821 With Multiplatform Firmware Cisco ip Phone 7841 Cisco ip Phone 7841 Firmware Cisco ip Phone 7841 With Multiplatform Firmware Cisco ip Phone 7861 Cisco ip Phone 7861 Firmware Cisco ip Phone 7861 With Multiplatform Firmware Cisco ip Phone 8811 Cisco ip Phone 8811 Firmware Cisco ip Phone 8811 With Multiplatform Firmware Cisco ip Phone 8841 Cisco ip Phone 8841 Firmware Cisco ip Phone 8841 With Multiplatform Firmware Cisco ip Phone 8845 Cisco ip Phone 8845 Firmware Cisco ip Phone 8845 With Multiplatform Firmware Cisco ip Phone 8851 Cisco ip Phone 8851 Firmware Cisco ip Phone 8851 With Multiplatform Firmware Cisco ip Phone 8861 Cisco ip Phone 8861 Firmware Cisco ip Phone 8861 With Multiplatform Firmware Cisco ip Phone 8865 Cisco ip Phone 8865 Firmware Cisco ip Phone 8865 With Multiplatform Firmware Cisco spa525g Cisco spa525g Firmware Cisco unified Ip Conference Phone 8831 Cisco unified Ip Conference Phone 8831 Firmware Cisco unified Ip Conference Phone 8831 For Third-party Call Control Firmware Cisco wireless Ip Phone 8821 Cisco wireless Ip Phone 8821-ex Cisco wireless Ip Phone 8821-ex Firmware Cisco wireless Ip Phone 8821 Firmware
CPEs		cpe:2.3:h:cisco:ip_conference_phone_7832:-:::::::* cpe:2.3:h:cisco:ip_conference_phone_8832:-:::::::* cpe:2.3:h:cisco:ip_phone_6821:-:::::::* cpe:2.3:h:cisco:ip_phone_6841:-:::::::* cpe:2.3:h:cisco:ip_phone_6851:-:::::::* cpe:2.3:h:cisco:ip_phone_6861:-:::::::* cpe:2.3:h:cisco:ip_phone_6871:-:::::::* cpe:2.3:h:cisco:ip_phone_7811:-:::::::* cpe:2.3:h:cisco:ip_phone_7821:-:::::::* cpe:2.3:h:cisco:ip_phone_7841:-:::::::* cpe:2.3:h:cisco:ip_phone_7861:-:::::::* cpe:2.3:h:cisco:ip_phone_8811:-:::::::* cpe:2.3:h:cisco:ip_phone_8841:-:::::::* cpe:2.3:h:cisco:ip_phone_8845:-:::::::* cpe:2.3:h:cisco:ip_phone_8851:-:::::::* cpe:2.3:h:cisco:ip_phone_8861:-:::::::* cpe:2.3:h:cisco:ip_phone_8865:-:::::::* cpe:2.3:h:cisco:spa525g:-:::::::* cpe:2.3:h:cisco:unified_ip_conference_phone_8831:-:::::::* cpe:2.3:h:cisco:wireless_ip_phone_8821-ex:-:::::::* cpe:2.3:h:cisco:wireless_ip_phone_8821:-:::::::* cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:::::::: cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:::::::: cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7811_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7811_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7821_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7821_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7841_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7841_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7861_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7861_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8811_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8811_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8841_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8841_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8845_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8845_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8851_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8851_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8861_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8861_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8865_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8865_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:spa525g_firmware:-:::::::* cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:::::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):-:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr1:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr2:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr3:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr4b:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr6:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_for_third-party_call_control_firmware:-:::::::* cpe:2.3:o:cisco:wireless_ip_phone_8821-ex_firmware:::::::: cpe:2.3:o:cisco:wireless_ip_phone_8821_firmware::::::::
Vendors & Products		Cisco Cisco ip Conference Phone 7832 Cisco ip Conference Phone 7832 Firmware Cisco ip Conference Phone 7832 With Multiplatform Firmware Cisco ip Conference Phone 8832 Cisco ip Conference Phone 8832 Firmware Cisco ip Conference Phone 8832 With Multiplatform Firmware Cisco ip Phone 6821 Cisco ip Phone 6821 With Multiplatform Firmware Cisco ip Phone 6841 Cisco ip Phone 6841 With Multiplatform Firmware Cisco ip Phone 6851 Cisco ip Phone 6851 With Multiplatform Firmware Cisco ip Phone 6861 Cisco ip Phone 6861 With Multiplatform Firmware Cisco ip Phone 6871 Cisco ip Phone 6871 With Multiplatform Firmware Cisco ip Phone 7811 Cisco ip Phone 7811 Firmware Cisco ip Phone 7811 With Multiplatform Firmware Cisco ip Phone 7821 Cisco ip Phone 7821 Firmware Cisco ip Phone 7821 With Multiplatform Firmware Cisco ip Phone 7841 Cisco ip Phone 7841 Firmware Cisco ip Phone 7841 With Multiplatform Firmware Cisco ip Phone 7861 Cisco ip Phone 7861 Firmware Cisco ip Phone 7861 With Multiplatform Firmware Cisco ip Phone 8811 Cisco ip Phone 8811 Firmware Cisco ip Phone 8811 With Multiplatform Firmware Cisco ip Phone 8841 Cisco ip Phone 8841 Firmware Cisco ip Phone 8841 With Multiplatform Firmware Cisco ip Phone 8845 Cisco ip Phone 8845 Firmware Cisco ip Phone 8845 With Multiplatform Firmware Cisco ip Phone 8851 Cisco ip Phone 8851 Firmware Cisco ip Phone 8851 With Multiplatform Firmware Cisco ip Phone 8861 Cisco ip Phone 8861 Firmware Cisco ip Phone 8861 With Multiplatform Firmware Cisco ip Phone 8865 Cisco ip Phone 8865 Firmware Cisco ip Phone 8865 With Multiplatform Firmware Cisco spa525g Cisco spa525g Firmware Cisco unified Ip Conference Phone 8831 Cisco unified Ip Conference Phone 8831 Firmware Cisco unified Ip Conference Phone 8831 For Third-party Call Control Firmware Cisco wireless Ip Phone 8821 Cisco wireless Ip Phone 8821-ex Cisco wireless Ip Phone 8821-ex Firmware Cisco wireless Ip Phone 8821 Firmware

Nov 18, 2024 5:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Nov 18, 2024 3:45 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
Title		Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities
Weaknesses		CWE-120
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-rce-dos-U2PsSkz3 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-distupd-N87eB6Z3
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:X/RC:X/E:X'}`

Subscriptions

Cisco Ip Conference Phone 7832 Ip Conference Phone 7832 Firmware Ip Conference Phone 7832 With Multiplatform Firmware Ip Conference Phone 8832 Ip Conference Phone 8832 Firmware Ip Conference Phone 8832 With Multiplatform Firmware Ip Phone 6821 Ip Phone 6821 With Multiplatform Firmware Ip Phone 6841 Ip Phone 6841 With Multiplatform Firmware Ip Phone 6851 Ip Phone 6851 With Multiplatform Firmware Ip Phone 6861 Ip Phone 6861 With Multiplatform Firmware Ip Phone 6871 Ip Phone 6871 With Multiplatform Firmware Ip Phone 7811 Ip Phone 7811 Firmware Ip Phone 7811 With Multiplatform Firmware Ip Phone 7821 Ip Phone 7821 Firmware Ip Phone 7821 With Multiplatform Firmware Ip Phone 7841 Ip Phone 7841 Firmware Ip Phone 7841 With Multiplatform Firmware Ip Phone 7861 Ip Phone 7861 Firmware Ip Phone 7861 With Multiplatform Firmware Ip Phone 8811 Ip Phone 8811 Firmware Ip Phone 8811 With Multiplatform Firmware Ip Phone 8841 Ip Phone 8841 Firmware Ip Phone 8841 With Multiplatform Firmware Ip Phone 8845 Ip Phone 8845 Firmware Ip Phone 8845 With Multiplatform Firmware Ip Phone 8851 Ip Phone 8851 Firmware Ip Phone 8851 With Multiplatform Firmware Ip Phone 8861 Ip Phone 8861 Firmware Ip Phone 8861 With Multiplatform Firmware Ip Phone 8865 Ip Phone 8865 Firmware Ip Phone 8865 With Multiplatform Firmware Spa525g Spa525g Firmware Unified Ip Conference Phone 8831 Unified Ip Conference Phone 8831 Firmware Unified Ip Conference Phone 8831 For Third-party Call Control Firmware Wireless Ip Phone 8821 Wireless Ip Phone 8821-ex Wireless Ip Phone 8821-ex Firmware Wireless Ip Phone 8821 Firmware

Weaknesses