Cisco IP and Video Phone Multiple Vulnerabilities (cisco-sa-ipphone-multi-vulns-cXAhCvS)

high Nessus Plugin ID 327615

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

According to its self-reported version, the remote Cisco IP or Video Phone running SIP Software is affected by multiple vulnerabilities:

- A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the affected device to reload. (CVE-2024-20376)

- A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed. (CVE-2024-20378)

- A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device. (CVE-2024-20357)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

Solution

Upgrade to the relevant fixed version referenced in Cisco bug IDs CSCwi64037, CSCwi64050, CSCwi64064, CSCwi64077, CSCwi64082, or CSCwi64103.

Plugin Details

Severity: High

ID: 327615

File Name: cisco-sa-phone-multi-vulns-cXAhCvS.nasl

Version: 1.1

Type: Remote

Family: CISCO

Published: 7/17/2026

Updated: 7/17/2026

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: High

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2024-20376

CVSS v3

Risk Factor: High

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnerability Information

CPE: x-cpe:/h:cisco:ip_phone, x-cpe:/o:cisco:ip_phone

Required KB Items: installed_sw/Cisco IP Phone, Settings/ParanoidReport

Patch Publication Date: 5/1/2024

Vulnerability Publication Date: 5/1/2024

Reference Information

CVE: CVE-2024-20357, CVE-2024-20376, CVE-2024-20378

CISCO-SA: cisco-sa-ipphone-multi-vulns-cXAhCvS

CISCO-BUG-ID: CSCwi64037, CSCwi64050, CSCwi64064, CSCwi64077, CSCwi64082, CSCwi64103

Detections

Analytics