CVE-2024-20445

Cisco IP Phone 7800, 8800, and 9800 Series Information Disclosure Vulnerability

Published Nov 6, 2024 CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Description

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device.

This vulnerability is due to improper storage of sensitive information within the web UI of Session Initiation Protocol (SIP)-based phone loads. An attacker could exploit this vulnerability by browsing to the IP address of a device that has Web Access enabled. A successful exploit could allow the attacker to access sensitive information, including incoming and outgoing call records.
Note: Web Access is disabled by default.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco Session Initiation Protocol (SIP) Software

unknown

Version	Status	Constraints
`12.1(1)SR1`	affected	—
`11.5(1)`	affected	—
`10.3(2)`	affected	—
`10.2(2)`	affected	—
`10.3(1)`	affected	—
`10.3(1)SR4`	affected	—
`11.0(1)`	affected	—
`10.4(1)SR2 3rd Party`	affected	—
`11.7(1)`	affected	—
`12.1(1)`	affected	—
`11.0(0.7) MPP`	affected	—
`9.3(4) 3rd Party`	affected	—
`12.5(1)SR2`	affected	—
`10.2(1)SR1`	affected	—
`9.3(4)SR3 3rd Party`	affected	—
`10.2(1)`	affected	—
`12.5(1)`	affected	—
`10.3(1)SR2`	affected	—
`11-0-1MSR1-1`	affected	—
`10.4(1) 3rd Party`	affected	—
`12.5(1)SR1`	affected	—
`11.5(1)SR1`	affected	—
`10.1(1)SR2`	affected	—
`12.0(1)SR2`	affected	—
`12.6(1)`	affected	—
`10.3(1.11) 3rd Party`	affected	—
`12.0(1)`	affected	—
`12.0(1)SR1`	affected	—
`9.3(3)`	affected	—
`12.5(1)SR3`	affected	—
`10.3(1)SR4b`	affected	—
`9.3(4)SR1 3rd Party`	affected	—
`10.3(1)SR5`	affected	—
`10.1(1.9)`	affected	—
`10.3(1.9) 3rd Party`	affected	—
`9.3(4)SR2 3rd Party`	affected	—
`10.3(1)SR1`	affected	—
`10.3(1)SR3`	affected	—
`10.1(1)SR1`	affected	—
`12.0(1)SR3`	affected	—
`12.6(1)SR1`	affected	—
`12.7(1)`	affected	—
`10.3(1)SR6`	affected	—
`12.8(1)`	affected	—
`12.7(1)SR1`	affected	—
`12.8(1)SR1`	affected	—
`12.8(1)SR2`	affected	—
`14.0(1)`	affected	—
`14.0(1)SR1`	affected	—
`10.3(1)SR7`	affected	—
`14.0(1)SR2`	affected	—
`14.1(1)`	affected	—
`14.0(1)SR3`	affected	—
`14.1(1)SR1`	affected	—
`14.1(1)SR2`	affected	—
`14.2(1)`	affected	—
`14.2(1)SR1`	affected	—
`14.1(1)SR3`	affected	—
`14.2(1)SR2`	affected	—
`3.1(1)`	affected	—
`3.0(1)`	affected	—
`14.2(1)SR3`	affected	—
`3.1(1)SR1`	affected	—

Configuration 1 [-]

AND

OR	cpe:2.3:o:cisco:desk_phone_9841_firmware:3.1\(1\):-::::::
	cpe:2.3:o:cisco:desk_phone_9841_firmware:3.1\(1\):sr1::::::

cpe:2.3:h:cisco:desk_phone_9841:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

OR	cpe:2.3:o:cisco:desk_phone_9851_firmware:3.1\(1\):-::::::
	cpe:2.3:o:cisco:desk_phone_9851_firmware:3.1\(1\):sr1::::::

cpe:2.3:h:cisco:desk_phone_9851:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

OR	cpe:2.3:o:cisco:desk_phone_9861_firmware:3.1\(1\):-::::::
	cpe:2.3:o:cisco:desk_phone_9861_firmware:3.1\(1\):sr1::::::

cpe:2.3:h:cisco:desk_phone_9861:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

OR	cpe:2.3:o:cisco:desk_phone_9871_firmware:3.1\(1\):-::::::
	cpe:2.3:o:cisco:desk_phone_9871_firmware:3.1\(1\):sr1::::::

cpe:2.3:h:cisco:desk_phone_9871:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_conference_phone_7832:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:cisco:ip_conference_phone_8831_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_conference_phone_8831:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_conference_phone_8832:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:cisco:ip_phone_7811_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:cisco:ip_phone_7821_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:cisco:ip_phone_7841_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:cisco:ip_phone_7861_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:cisco:ip_phone_8841_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:cisco:ip_phone_8845_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:cisco:ip_phone_8851_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:cisco:ip_phone_8851nr_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_8851nr:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

OR	cpe:2.3:o:cisco:video_phone_8875_firmware::::::::
	cpe:2.3:o:cisco:video_phone_8875_firmware:2.3\(1\):-::::::
	cpe:2.3:o:cisco:video_phone_8875_firmware:2.3\(1\):sr1::::::

cpe:2.3:h:cisco:video_phone_8875:-:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-18160	A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to improper storage of sensitive information within the web UI of Session Initiation Protocol (SIP)-based phone loads. An attacker could exploit this vulnerability by browsing to the IP address of a device that has Web Access enabled. A successful exploit could allow the attacker to access sensitive information, including incoming and outgoing call records. Note: Web Access is disabled by default.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.441% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-infodisc-sbyqQVbG

History

Jan 5, 2026 3:00 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco desk Phone 9841 Cisco desk Phone 9841 Firmware Cisco desk Phone 9851 Cisco desk Phone 9851 Firmware Cisco desk Phone 9861 Cisco desk Phone 9861 Firmware Cisco desk Phone 9871 Cisco desk Phone 9871 Firmware Cisco ip Conference Phone 7832 Cisco ip Conference Phone 7832 Firmware Cisco ip Conference Phone 8831 Cisco ip Conference Phone 8831 Firmware Cisco ip Conference Phone 8832 Cisco ip Conference Phone 8832 Firmware Cisco ip Phone 7811 Cisco ip Phone 7811 Firmware Cisco ip Phone 7821 Cisco ip Phone 7821 Firmware Cisco ip Phone 7841 Cisco ip Phone 7841 Firmware Cisco ip Phone 7861 Cisco ip Phone 7861 Firmware Cisco ip Phone 8811 Cisco ip Phone 8811 Firmware Cisco ip Phone 8841 Cisco ip Phone 8841 Firmware Cisco ip Phone 8845 Cisco ip Phone 8845 Firmware Cisco ip Phone 8851 Cisco ip Phone 8851 Firmware Cisco ip Phone 8851nr Cisco ip Phone 8851nr Firmware Cisco ip Phone 8861 Cisco ip Phone 8861 Firmware Cisco video Phone 8875 Cisco video Phone 8875 Firmware
CPEs		cpe:2.3:h:cisco:desk_phone_9841:-:::::::* cpe:2.3:h:cisco:desk_phone_9851:-:::::::* cpe:2.3:h:cisco:desk_phone_9861:-:::::::* cpe:2.3:h:cisco:desk_phone_9871:-:::::::* cpe:2.3:h:cisco:ip_conference_phone_7832:-:::::::* cpe:2.3:h:cisco:ip_conference_phone_8831:-:::::::* cpe:2.3:h:cisco:ip_conference_phone_8832:-:::::::* cpe:2.3:h:cisco:ip_phone_7811:-:::::::* cpe:2.3:h:cisco:ip_phone_7821:-:::::::* cpe:2.3:h:cisco:ip_phone_7841:-:::::::* cpe:2.3:h:cisco:ip_phone_7861:-:::::::* cpe:2.3:h:cisco:ip_phone_8811:-:::::::* cpe:2.3:h:cisco:ip_phone_8841:-:::::::* cpe:2.3:h:cisco:ip_phone_8845:-:::::::* cpe:2.3:h:cisco:ip_phone_8851:-:::::::* cpe:2.3:h:cisco:ip_phone_8851nr:-:::::::* cpe:2.3:h:cisco:ip_phone_8861:-:::::::* cpe:2.3:h:cisco:video_phone_8875:-:::::::* cpe:2.3:o:cisco:desk_phone_9841_firmware:3.1\(1\):-:::::: cpe:2.3:o:cisco:desk_phone_9841_firmware:3.1\(1\):sr1:::::: cpe:2.3:o:cisco:desk_phone_9851_firmware:3.1\(1\):-:::::: cpe:2.3:o:cisco:desk_phone_9851_firmware:3.1\(1\):sr1:::::: cpe:2.3:o:cisco:desk_phone_9861_firmware:3.1\(1\):-:::::: cpe:2.3:o:cisco:desk_phone_9861_firmware:3.1\(1\):sr1:::::: cpe:2.3:o:cisco:desk_phone_9871_firmware:3.1\(1\):-:::::: cpe:2.3:o:cisco:desk_phone_9871_firmware:3.1\(1\):sr1:::::: cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:::::::: cpe:2.3:o:cisco:ip_conference_phone_8831_firmware:::::::: cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7811_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7821_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7841_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7861_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8811_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8841_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8845_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8851_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8851nr_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8861_firmware:::::::: cpe:2.3:o:cisco:video_phone_8875_firmware:::::::: cpe:2.3:o:cisco:video_phone_8875_firmware:2.3\(1\):-:::::: cpe:2.3:o:cisco:video_phone_8875_firmware:2.3\(1\):sr1::::::
Vendors & Products		Cisco desk Phone 9841 Cisco desk Phone 9841 Firmware Cisco desk Phone 9851 Cisco desk Phone 9851 Firmware Cisco desk Phone 9861 Cisco desk Phone 9861 Firmware Cisco desk Phone 9871 Cisco desk Phone 9871 Firmware Cisco ip Conference Phone 7832 Cisco ip Conference Phone 7832 Firmware Cisco ip Conference Phone 8831 Cisco ip Conference Phone 8831 Firmware Cisco ip Conference Phone 8832 Cisco ip Conference Phone 8832 Firmware Cisco ip Phone 7811 Cisco ip Phone 7811 Firmware Cisco ip Phone 7821 Cisco ip Phone 7821 Firmware Cisco ip Phone 7841 Cisco ip Phone 7841 Firmware Cisco ip Phone 7861 Cisco ip Phone 7861 Firmware Cisco ip Phone 8811 Cisco ip Phone 8811 Firmware Cisco ip Phone 8841 Cisco ip Phone 8841 Firmware Cisco ip Phone 8845 Cisco ip Phone 8845 Firmware Cisco ip Phone 8851 Cisco ip Phone 8851 Firmware Cisco ip Phone 8851nr Cisco ip Phone 8851nr Firmware Cisco ip Phone 8861 Cisco ip Phone 8861 Firmware Cisco video Phone 8875 Cisco video Phone 8875 Firmware

Jul 12, 2025 1:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00092}`	epss `{'score': 0.001}`

Nov 6, 2024 6:15 PM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco sip Ip Phone Software
CPEs		cpe:2.3:a:cisco:sip_ip_phone_software::::::::
Vendors & Products		Cisco Cisco sip Ip Phone Software
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Nov 6, 2024 4:45 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to improper storage of sensitive information within the web UI of Session Initiation Protocol (SIP)-based phone loads. An attacker could exploit this vulnerability by browsing to the IP address of a device that has Web Access enabled. A successful exploit could allow the attacker to access sensitive information, including incoming and outgoing call records. Note: Web Access is disabled by default.
Title		Cisco IP Phone 7800, 8800, and 9800 Series Information Disclosure Vulnerability
Weaknesses		CWE-200
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-infodisc-sbyqQVbG
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}`

Subscriptions

Cisco Desk Phone 9841 Desk Phone 9841 Firmware Desk Phone 9851 Desk Phone 9851 Firmware Desk Phone 9861 Desk Phone 9861 Firmware Desk Phone 9871 Desk Phone 9871 Firmware Ip Conference Phone 7832 Ip Conference Phone 7832 Firmware Ip Conference Phone 8831 Ip Conference Phone 8831 Firmware Ip Conference Phone 8832 Ip Conference Phone 8832 Firmware Ip Phone 7811 Ip Phone 7811 Firmware Ip Phone 7821 Ip Phone 7821 Firmware Ip Phone 7841 Ip Phone 7841 Firmware Ip Phone 7861 Ip Phone 7861 Firmware Ip Phone 8811 Ip Phone 8811 Firmware Ip Phone 8841 Ip Phone 8841 Firmware Ip Phone 8845 Ip Phone 8845 Firmware Ip Phone 8851 Ip Phone 8851 Firmware Ip Phone 8851nr Ip Phone 8851nr Firmware Ip Phone 8861 Ip Phone 8861 Firmware Sip Ip Phone Software Video Phone 8875 Video Phone 8875 Firmware

Weaknesses