cveboard RSS feed

CVE-2024-20357

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco IP Phones with Multiplatform Firmware

Vendor
Cisco
Product
Cisco IP Phones with Multiplatform Firmware
Platforms
Unknown
Default status
Unknown
Cisco IP Phones with Multiplatform Firmware · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
11.3.1 MSR2-6affectedUnavailableUnavailableUnavailableNone listed
11.3.1 MSR3-3affectedUnavailableUnavailableUnavailableNone listed
11.3.2affectedUnavailableUnavailableUnavailableNone listed
11.3.3affectedUnavailableUnavailableUnavailableNone listed
11.3.1 MSR4-1affectedUnavailableUnavailableUnavailableNone listed
11.3.4affectedUnavailableUnavailableUnavailableNone listed
11.3.5affectedUnavailableUnavailableUnavailableNone listed
11.3.3 MSR2affectedUnavailableUnavailableUnavailableNone listed
11.3.3 MSR1affectedUnavailableUnavailableUnavailableNone listed
11.3.6affectedUnavailableUnavailableUnavailableNone listed
11-3-1MPPSR4UPGaffectedUnavailableUnavailableUnavailableNone listed
11.3.7affectedUnavailableUnavailableUnavailableNone listed
11-3-1MSR2UPGaffectedUnavailableUnavailableUnavailableNone listed
11.3.6SR1affectedUnavailableUnavailableUnavailableNone listed
11.3.7SR1affectedUnavailableUnavailableUnavailableNone listed
11.3.7SR2affectedUnavailableUnavailableUnavailableNone listed
11.0.0affectedUnavailableUnavailableUnavailableNone listed
11.0.1affectedUnavailableUnavailableUnavailableNone listed
11.0.1 MSR1-1affectedUnavailableUnavailableUnavailableNone listed
11.0.2affectedUnavailableUnavailableUnavailableNone listed
11.1.1affectedUnavailableUnavailableUnavailableNone listed
11.1.1 MSR1-1affectedUnavailableUnavailableUnavailableNone listed
11.1.1 MSR2-1affectedUnavailableUnavailableUnavailableNone listed
11.1.2affectedUnavailableUnavailableUnavailableNone listed
11.1.2 MSR1-1affectedUnavailableUnavailableUnavailableNone listed
11.1.2 MSR3-1affectedUnavailableUnavailableUnavailableNone listed
11.2.1affectedUnavailableUnavailableUnavailableNone listed
11.2.2affectedUnavailableUnavailableUnavailableNone listed
11.2.3affectedUnavailableUnavailableUnavailableNone listed
11.2.3 MSR1-1affectedUnavailableUnavailableUnavailableNone listed
11.2.4affectedUnavailableUnavailableUnavailableNone listed
11.3.1affectedUnavailableUnavailableUnavailableNone listed
11.3.1 MSR1-3affectedUnavailableUnavailableUnavailableNone listed
4.5affectedUnavailableUnavailableUnavailableNone listed
4.6 MSR1affectedUnavailableUnavailableUnavailableNone listed
4.7.1affectedUnavailableUnavailableUnavailableNone listed
4.8.1affectedUnavailableUnavailableUnavailableNone listed
4.8.1 SR1affectedUnavailableUnavailableUnavailableNone listed
5.0.1affectedUnavailableUnavailableUnavailableNone listed
12.0.1affectedUnavailableUnavailableUnavailableNone listed
12.0.2affectedUnavailableUnavailableUnavailableNone listed
12.0.3affectedUnavailableUnavailableUnavailableNone listed
12.0.3SR1affectedUnavailableUnavailableUnavailableNone listed
12.0.4affectedUnavailableUnavailableUnavailableNone listed
5.1.1affectedUnavailableUnavailableUnavailableNone listed
5.1.2affectedUnavailableUnavailableUnavailableNone listed
5.1(2)SR1affectedUnavailableUnavailableUnavailableNone listed

Cisco PhoneOS

Vendor
Cisco
Product
Cisco PhoneOS
Platforms
Unknown
Default status
Unknown
Cisco PhoneOS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.1affectedUnavailableUnavailableUnavailableNone listed
2.1.1affectedUnavailableUnavailableUnavailableNone listed
2.0.1affectedUnavailableUnavailableUnavailableNone listed
2.3.1affectedUnavailableUnavailableUnavailableNone listed