cveboard RSS feed

CVE-2023-20221

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web-based management interface of an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform a factory reset of the affected device, resulting in a Denial of Service (DoS) condition.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco IP Phones with Multiplatform Firmware

Vendor
Cisco
Product
Cisco IP Phones with Multiplatform Firmware
Platforms
Unknown
Default status
Unknown
Cisco IP Phones with Multiplatform Firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
11.3.1 MSR2-6affectedUnavailableUnavailableUnavailableNone listed
11.3.1 MSR3-3affectedUnavailableUnavailableUnavailableNone listed
11.3.2affectedUnavailableUnavailableUnavailableNone listed
11.3.3affectedUnavailableUnavailableUnavailableNone listed
11.3.4affectedUnavailableUnavailableUnavailableNone listed
11.3.5affectedUnavailableUnavailableUnavailableNone listed
11.3.3 MSR1affectedUnavailableUnavailableUnavailableNone listed
11.3.6affectedUnavailableUnavailableUnavailableNone listed
11-3-1MPPSR4UPGaffectedUnavailableUnavailableUnavailableNone listed
11.3.7affectedUnavailableUnavailableUnavailableNone listed
11-3-1MSR2UPGaffectedUnavailableUnavailableUnavailableNone listed
11.3.6SR1affectedUnavailableUnavailableUnavailableNone listed
11.3.7SR1affectedUnavailableUnavailableUnavailableNone listed
11.3.7SR2affectedUnavailableUnavailableUnavailableNone listed
11.0.0affectedUnavailableUnavailableUnavailableNone listed
11.0.1affectedUnavailableUnavailableUnavailableNone listed
11.0.1 MSR1-1affectedUnavailableUnavailableUnavailableNone listed
11.0.2affectedUnavailableUnavailableUnavailableNone listed
11.1.1affectedUnavailableUnavailableUnavailableNone listed
11.1.1 MSR1-1affectedUnavailableUnavailableUnavailableNone listed
11.1.1 MSR2-1affectedUnavailableUnavailableUnavailableNone listed
11.1.2affectedUnavailableUnavailableUnavailableNone listed
11.1.2 MSR1-1affectedUnavailableUnavailableUnavailableNone listed
11.1.2 MSR3-1affectedUnavailableUnavailableUnavailableNone listed
11.2.1affectedUnavailableUnavailableUnavailableNone listed
11.2.2affectedUnavailableUnavailableUnavailableNone listed
11.2.3affectedUnavailableUnavailableUnavailableNone listed
11.2.3 MSR1-1affectedUnavailableUnavailableUnavailableNone listed
11.2.4affectedUnavailableUnavailableUnavailableNone listed
11.3.1affectedUnavailableUnavailableUnavailableNone listed
11.3.1 MSR1-3affectedUnavailableUnavailableUnavailableNone listed

Cisco PhoneOS

Vendor
Cisco
Product
Cisco PhoneOS
Platforms
Unknown
Default status
Unknown
Cisco PhoneOS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.1affectedUnavailableUnavailableUnavailableNone listed