Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2020-3360— Cisco IP Phones Series 7800 and Series 8800 Call Log Information Disclosure Vulnerability

EPSS 0.36% · P58
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-3360

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco IP Phones Series 7800 and Series 8800 Call Log Information Disclosure Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote attacker to view sensitive information on an affected device. The vulnerability is due to improper access controls on the web-based management interface of an affected device. An attacker could exploit this vulnerability by sending malicious requests to the device, which could allow the attacker to bypass access restrictions. A successful attack could allow the attacker to view sensitive information, including device call logs that contain names, usernames, and phone numbers of users of the device.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco IP Phone 8800 Series和7800 Series 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco IP Phone 8800 Series和Cisco IP Phone 7800 Series都是美国思科(Cisco)公司的产品。Cisco IP Phone 8800 Series是一款8800系列的IP电话。Cisco IP Phone 7800 Series是一款7800系列IP电话。 Cisco IP Phone 7800 Series和8800 Series(与Unified Communications Manager 12.8(1)及之前版本兼容)中的Web Access功能存
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
CiscoCisco IP Phone 8800 Series Software n/a -

II. Public POCs for CVE-2020-3360

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-3360

登录查看更多情报信息。

Same Patch Batch · Cisco · 2020-06-18 · 38 CVEs total

CVE-2020-33618.1 HIGHCisco Webex Meetings and Cisco Webex Meetings Server Token Handling Unauthorized Access Vu
CVE-2020-33505.5 MEDIUMCisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability
CVE-2020-33624.7 MEDIUMCisco Network Services Orchestrator Information Disclosure Vulnerability
CVE-2020-3292Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabili
CVE-2020-3337Cisco Umbrella Open Redirect Vulnerability
CVE-2020-3336Cisco TelePresence Collaboration Endpoint and RoomOS Software Command Injection Vulnerabil
CVE-2020-3296Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabili
CVE-2020-3295Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabili
CVE-2020-3294Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabili
CVE-2020-3293Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabili
CVE-2020-3277Cisco Small Business RV Series Routers Command Injection Vulnerabilities
CVE-2020-3291Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabili
CVE-2020-3290Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabili
CVE-2020-3289Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabili
CVE-2020-3288Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabili
CVE-2020-3287Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabili
CVE-2020-3286Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabili
CVE-2020-3279Cisco Small Business RV Series Routers Command Injection Vulnerabilities
CVE-2020-3278Cisco Small Business RV Series Routers Command Injection Vulnerabilities
CVE-2020-3276Cisco Small Business RV Series Routers Command Injection Vulnerabilities

Showing top 20 of 38 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2020-3360

No comments yet


Leave a comment