PT-2020-1613 · Cisco · Cisco Ip Phone

Ben Seri · Published 2020-02-05 · Updated 2020-02-07 · CVE-2020-3111

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco IP Phone (affected versions not specified)

Description The issue is due to insufficient input validation in the Cisco Discovery Protocol implementation, allowing an unauthenticated, adjacent attacker to execute arbitrary code with root privileges or cause a reload of the affected IP phone. This can be achieved by sending a crafted Cisco Discovery Protocol packet to the targeted device. The vulnerability exploits missing checks when processing Cisco Discovery Protocol messages, potentially resulting in a denial of service (DoS) condition. The attacker must be in the same broadcast domain as the affected device to exploit this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-00791

CVE-2020-3111

Affected Products

Cisco Ip Phone

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-voip-phones-rce-dos · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3111 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3111 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00791 · Security Note
• https://t.me/cvenotify/800 · Telegram Post
• http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html · Note