CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• cisco ip phone 8800 series firmware10.2(1)
• cisco ip phone 8800 series firmware10.2(2)
• cisco ip phone 8800 series firmware10.3
• cisco ip phone 8800 series firmware10.3(2)
• cisco ip phone 8800 series firmware11.0(1)

Other highest-scoring records for the same primary product.

• CVE-2018-0461Cisco IP Phone 8800 Series Arbitrary Script Injection Vulnerability
  35Monitor
• CVE-2016-1479Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruption) via a crafted HTTP
  31Monitor
• CVE-2017-12305A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to execute arbitrary comma
  26Monitor
• CVE-2017-12328A vulnerability in Session Initiation Protocol (SIP) call handling in Cisco IP Phone 8800 Series devices could allow an unauthenticated, rem
  24Monitor
• CVE-2017-6630A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11.0(0.1) could allow an unauthenticated, rem
  22Monitor
• CVE-2016-1476Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbit
  21Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.