CVE-2019-16008
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.3 / Impact: 2.7
Source: NVD
Description
A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based GUI of an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Affected (19)
Products: Cisco: Ip Phone 6841 Firmware, Ip Phone 6851 Firmware, Ip Phone 6825 Firmware, Ip Phone 6861 Firmware, Ip Phone 6871 Firmware, Ip Phone 6821 Firmware, Ip Phone 7811 Firmware, Ip Phone 7821 Firmware, Ip Phone 7832 Firmware, Ip Phone 7841 Firmware, Ip Phone 7861 Firmware, Ip Phone 8811 Firmware, Ip Phone 8831 Firmware, Ip Phone 8832 Firmware, Ip Phone 8841 Firmware, Ip Phone 8845 Firmware, Ip Phone 8851 Firmware, Ip Phone 8861 Firmware, Ip Phone 8865 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 6841 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 6851 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 6825 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 6861 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 6871 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 6821 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 7811 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 7821 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 7832 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 7841 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 7861 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 8811 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 8831 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 8832 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 8841 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 8845 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 8851 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 8861 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.3\(1\) |
| Running on/with | Platform Versions |
|---|---|
Cisco Ip Phone 8865 | All versions |
References (2)
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.