CVE-2020-3161

Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability

9.8
CVSS 3.1
83.9 %
EPSS (current)
2021-11-03
KEV addition
No
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Cisco / Cisco IP Phones

Published: 2020-04-15 · Due (CISA): 2022-05-03

CWE: CWE-20 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
exploitdb48342Cisco IP Phone 11.7 - Denial of service (PoC)2020-04-17

References only — no downloads or instructions.

Sources