CVE-2020-3161
Summary
| CVE | CVE-2020-3161 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-04-15 20:15:00 UTC |
| Updated | 2021-08-12 18:19:00 UTC |
| Description | A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition. |
Risk And Classification
EPSS: 0.773260000 probability, percentile 0.989700000 (date 2026-04-01)
CISA KEV: Listed on 2021-11-03; due 2022-05-03; ransomware use Unknown
Problem Types: CWE-20
CISA Known Exploited Vulnerability
| Vendor | Cisco |
|---|---|
| Product | Cisco IP Phones |
| Name | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability |
| Required Action | Apply updates per vendor instructions. |
| Notes | https://nvd.nist.gov/vuln/detail/CVE-2020-3161 |
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | 8831 | - | All | All | All |
| Hardware | Cisco | 8831 | - | All | All | All |
| Operating System | Cisco | 8831 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | 8831 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | 8831 Firmware | 11.0\(5\)sr1 | All | All | All |
| Operating System | Cisco | 8831 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | 8831 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | 8831 Firmware | 11.0\(5\)sr1 | All | All | All |
| Hardware | Cisco | Ip Phone 7811 | - | All | All | All |
| Hardware | Cisco | Ip Phone 7811 | - | All | All | All |
| Operating System | Cisco | Ip Phone 7811 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 7811 Firmware | 11.0\(1\) | All | All | All |
| Hardware | Cisco | Ip Phone 7821 | - | All | All | All |
| Hardware | Cisco | Ip Phone 7821 | - | All | All | All |
| Operating System | Cisco | Ip Phone 7821 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 7821 Firmware | 11.0\(1\) | All | All | All |
| Hardware | Cisco | Ip Phone 7841 | - | All | All | All |
| Hardware | Cisco | Ip Phone 7841 | - | All | All | All |
| Operating System | Cisco | Ip Phone 7841 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 7841 Firmware | 11.0\(1\) | All | All | All |
| Hardware | Cisco | Ip Phone 7861 | - | All | All | All |
| Hardware | Cisco | Ip Phone 7861 | - | All | All | All |
| Operating System | Cisco | Ip Phone 7861 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 7861 Firmware | 11.0\(1\) | All | All | All |
| Hardware | Cisco | Ip Phone 8811 | - | All | All | All |
| Hardware | Cisco | Ip Phone 8811 | - | All | All | All |
| Operating System | Cisco | Ip Phone 8811 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8811 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8811 Firmware | 11.0\(5\)sr1 | All | All | All |
| Operating System | Cisco | Ip Phone 8811 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8811 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8811 Firmware | 11.0\(5\)sr1 | All | All | All |
| Hardware | Cisco | Ip Phone 8821 | - | All | All | All |
| Hardware | Cisco | Ip Phone 8821 | - | All | All | All |
| Hardware | Cisco | Ip Phone 8821-ex | - | All | All | All |
| Hardware | Cisco | Ip Phone 8821-ex | - | All | All | All |
| Operating System | Cisco | Ip Phone 8821-ex Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8821-ex Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8821-ex Firmware | 11.0\(5\)sr1 | All | All | All |
| Operating System | Cisco | Ip Phone 8821-ex Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8821-ex Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8821-ex Firmware | 11.0\(5\)sr1 | All | All | All |
| Operating System | Cisco | Ip Phone 8821 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8821 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8821 Firmware | 11.0\(5\)sr1 | All | All | All |
| Operating System | Cisco | Ip Phone 8821 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8821 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8821 Firmware | 11.0\(5\)sr1 | All | All | All |
| Hardware | Cisco | Ip Phone 8841 | - | All | All | All |
| Hardware | Cisco | Ip Phone 8841 | - | All | All | All |
| Operating System | Cisco | Ip Phone 8841 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8841 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8841 Firmware | 11.0\(5\)sr1 | All | All | All |
| Operating System | Cisco | Ip Phone 8841 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8841 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8841 Firmware | 11.0\(5\)sr1 | All | All | All |
| Hardware | Cisco | Ip Phone 8845 | - | All | All | All |
| Hardware | Cisco | Ip Phone 8845 | - | All | All | All |
| Operating System | Cisco | Ip Phone 8845 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8845 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8845 Firmware | 11.0\(5\)sr1 | All | All | All |
| Operating System | Cisco | Ip Phone 8845 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8845 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8845 Firmware | 11.0\(5\)sr1 | All | All | All |
| Hardware | Cisco | Ip Phone 8851 | - | All | All | All |
| Hardware | Cisco | Ip Phone 8851 | - | All | All | All |
| Operating System | Cisco | Ip Phone 8851 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8851 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8851 Firmware | 11.0\(5\)sr1 | All | All | All |
| Operating System | Cisco | Ip Phone 8851 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8851 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8851 Firmware | 11.0\(5\)sr1 | All | All | All |
| Hardware | Cisco | Ip Phone 8861 | - | All | All | All |
| Hardware | Cisco | Ip Phone 8861 | - | All | All | All |
| Operating System | Cisco | Ip Phone 8861 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8861 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8861 Firmware | 11.0\(5\)sr1 | All | All | All |
| Operating System | Cisco | Ip Phone 8861 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8861 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8861 Firmware | 11.0\(5\)sr1 | All | All | All |
| Hardware | Cisco | Ip Phone 8865 | - | All | All | All |
| Hardware | Cisco | Ip Phone 8865 | - | All | All | All |
| Operating System | Cisco | Ip Phone 8865 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8865 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8865 Firmware | 11.0\(5\)sr1 | All | All | All |
| Operating System | Cisco | Ip Phone 8865 Firmware | 10.3\(1\)es14 | All | All | All |
| Operating System | Cisco | Ip Phone 8865 Firmware | 11.0\(1\) | All | All | All |
| Operating System | Cisco | Ip Phone 8865 Firmware | 11.0\(5\)sr1 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco IP Phone 11.7 Denial Of Service ≈ Packet Storm | MISC | packetstormsecurity.com | Exploit, Third Party Advisory, VDB Entry |
| Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
| CISA Known Exploited Vulnerabilities catalog | CISA | www.cisa.gov | kev |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 730176 Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability (cisco-sa-voip-phones-rce-dos-rB6EeRXs)