CVE-2021-1379 - Vulnerability Details

CVE-2021-1379 - Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone.
These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00091.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Cisco Subscribe	Ip Conference Phone 7832 Subscribe Ip Conference Phone 7832 Firmware Subscribe Ip Conference Phone 7832 With Multiplatform Firmware Subscribe Ip Conference Phone 8832 Subscribe Ip Conference Phone 8832 Firmware Subscribe Ip Conference Phone 8832 With Multiplatform Firmware Subscribe Ip Phone 6821 Subscribe Ip Phone 6821 With Multiplatform Firmware Subscribe Ip Phone 6841 Subscribe Ip Phone 6841 With Multiplatform Firmware Subscribe Ip Phone 6851 Subscribe Ip Phone 6851 With Multiplatform Firmware Subscribe Ip Phone 6861 Subscribe Ip Phone 6861 With Multiplatform Firmware Subscribe Ip Phone 6871 Subscribe Ip Phone 6871 With Multiplatform Firmware Subscribe Ip Phone 7811 Subscribe Ip Phone 7811 Firmware Subscribe Ip Phone 7811 With Multiplatform Firmware Subscribe Ip Phone 7821 Subscribe Ip Phone 7821 Firmware Subscribe Ip Phone 7821 With Multiplatform Firmware Subscribe Ip Phone 7841 Subscribe Ip Phone 7841 Firmware Subscribe Ip Phone 7841 With Multiplatform Firmware Subscribe Ip Phone 7861 Subscribe Ip Phone 7861 Firmware Subscribe Ip Phone 7861 With Multiplatform Firmware Subscribe Ip Phone 8811 Subscribe Ip Phone 8811 Firmware Subscribe Ip Phone 8811 With Multiplatform Firmware Subscribe Ip Phone 8841 Subscribe Ip Phone 8841 Firmware Subscribe Ip Phone 8841 With Multiplatform Firmware Subscribe Ip Phone 8845 Subscribe Ip Phone 8845 Firmware Subscribe Ip Phone 8845 With Multiplatform Firmware Subscribe Ip Phone 8851 Subscribe Ip Phone 8851 Firmware Subscribe Ip Phone 8851 With Multiplatform Firmware Subscribe Ip Phone 8861 Subscribe Ip Phone 8861 Firmware Subscribe Ip Phone 8861 With Multiplatform Firmware Subscribe Ip Phone 8865 Subscribe Ip Phone 8865 Firmware Subscribe Ip Phone 8865 With Multiplatform Firmware Subscribe Spa525g Subscribe Spa525g Firmware Subscribe Unified Ip Conference Phone 8831 Subscribe Unified Ip Conference Phone 8831 Firmware Subscribe Unified Ip Conference Phone 8831 For Third-party Call Control Firmware Subscribe Wireless Ip Phone 8821 Subscribe Wireless Ip Phone 8821-ex Subscribe Wireless Ip Phone 8821-ex Firmware Subscribe Wireless Ip Phone 8821 Firmware Subscribe

Configuration 1 [-]

AND

OR	cpe:2.3:o:cisco:ip_conference_phone_7832_firmware::::::::
	cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_conference_phone_7832:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

OR	cpe:2.3:o:cisco:ip_conference_phone_8832_firmware::::::::
	cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_conference_phone_8832:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_6821:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_6841:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_6851:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:ip_phone_6871:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_7811_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_7811_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_7821_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_7821_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_7841_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_7841_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_7861_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_7861_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8811_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8811_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8841_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8841_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8851_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8851_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8861_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8861_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8845_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8845_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

OR	cpe:2.3:o:cisco:ip_phone_8865_firmware::::::::
	cpe:2.3:o:cisco:ip_phone_8865_firmware:12.8\(1\):-::::::
	cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware::::::::

cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

OR	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware::::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):-::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr1::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr2::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr3::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr4b::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr6::::::
	cpe:2.3:o:cisco:unified_ip_conference_phone_8831_for_third-party_call_control_firmware:-:::::::*

cpe:2.3:h:cisco:unified_ip_conference_phone_8831:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:cisco:wireless_ip_phone_8821_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:wireless_ip_phone_8821:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:cisco:wireless_ip_phone_8821-ex_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:wireless_ip_phone_8821-ex:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:cisco:spa525g_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:spa525g:-:*:*:*:*:*:*:*

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2021-6846	Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-rce-dos-U2PsSkz3
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-distupd-N87eB6Z3

History

Tue, 06 Jan 2026 17:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco ip Conference Phone 7832 Cisco ip Conference Phone 7832 Firmware Cisco ip Conference Phone 7832 With Multiplatform Firmware Cisco ip Conference Phone 8832 Cisco ip Conference Phone 8832 Firmware Cisco ip Conference Phone 8832 With Multiplatform Firmware Cisco ip Phone 6821 Cisco ip Phone 6821 With Multiplatform Firmware Cisco ip Phone 6841 Cisco ip Phone 6841 With Multiplatform Firmware Cisco ip Phone 6851 Cisco ip Phone 6851 With Multiplatform Firmware Cisco ip Phone 6861 Cisco ip Phone 6861 With Multiplatform Firmware Cisco ip Phone 6871 Cisco ip Phone 6871 With Multiplatform Firmware Cisco ip Phone 7811 Cisco ip Phone 7811 Firmware Cisco ip Phone 7811 With Multiplatform Firmware Cisco ip Phone 7821 Cisco ip Phone 7821 Firmware Cisco ip Phone 7821 With Multiplatform Firmware Cisco ip Phone 7841 Cisco ip Phone 7841 Firmware Cisco ip Phone 7841 With Multiplatform Firmware Cisco ip Phone 7861 Cisco ip Phone 7861 Firmware Cisco ip Phone 7861 With Multiplatform Firmware Cisco ip Phone 8811 Cisco ip Phone 8811 Firmware Cisco ip Phone 8811 With Multiplatform Firmware Cisco ip Phone 8841 Cisco ip Phone 8841 Firmware Cisco ip Phone 8841 With Multiplatform Firmware Cisco ip Phone 8845 Cisco ip Phone 8845 Firmware Cisco ip Phone 8845 With Multiplatform Firmware Cisco ip Phone 8851 Cisco ip Phone 8851 Firmware Cisco ip Phone 8851 With Multiplatform Firmware Cisco ip Phone 8861 Cisco ip Phone 8861 Firmware Cisco ip Phone 8861 With Multiplatform Firmware Cisco ip Phone 8865 Cisco ip Phone 8865 Firmware Cisco ip Phone 8865 With Multiplatform Firmware Cisco spa525g Cisco spa525g Firmware Cisco unified Ip Conference Phone 8831 Cisco unified Ip Conference Phone 8831 Firmware Cisco unified Ip Conference Phone 8831 For Third-party Call Control Firmware Cisco wireless Ip Phone 8821 Cisco wireless Ip Phone 8821-ex Cisco wireless Ip Phone 8821-ex Firmware Cisco wireless Ip Phone 8821 Firmware
CPEs		cpe:2.3:h:cisco:ip_conference_phone_7832:-:::::::* cpe:2.3:h:cisco:ip_conference_phone_8832:-:::::::* cpe:2.3:h:cisco:ip_phone_6821:-:::::::* cpe:2.3:h:cisco:ip_phone_6841:-:::::::* cpe:2.3:h:cisco:ip_phone_6851:-:::::::* cpe:2.3:h:cisco:ip_phone_6861:-:::::::* cpe:2.3:h:cisco:ip_phone_6871:-:::::::* cpe:2.3:h:cisco:ip_phone_7811:-:::::::* cpe:2.3:h:cisco:ip_phone_7821:-:::::::* cpe:2.3:h:cisco:ip_phone_7841:-:::::::* cpe:2.3:h:cisco:ip_phone_7861:-:::::::* cpe:2.3:h:cisco:ip_phone_8811:-:::::::* cpe:2.3:h:cisco:ip_phone_8841:-:::::::* cpe:2.3:h:cisco:ip_phone_8845:-:::::::* cpe:2.3:h:cisco:ip_phone_8851:-:::::::* cpe:2.3:h:cisco:ip_phone_8861:-:::::::* cpe:2.3:h:cisco:ip_phone_8865:-:::::::* cpe:2.3:h:cisco:spa525g:-:::::::* cpe:2.3:h:cisco:unified_ip_conference_phone_8831:-:::::::* cpe:2.3:h:cisco:wireless_ip_phone_8821-ex:-:::::::* cpe:2.3:h:cisco:wireless_ip_phone_8821:-:::::::* cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:::::::: cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_conference_phone_7832_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:::::::: cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_conference_phone_8832_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_6821_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_6841_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_6851_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_6861_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_6871_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7811_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7811_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_7811_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7821_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7821_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_7821_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7841_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7841_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_7841_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7861_firmware:::::::: cpe:2.3:o:cisco:ip_phone_7861_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_7861_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8811_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8811_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8841_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8841_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8845_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8845_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8851_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8851_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8861_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8861_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8865_firmware:::::::: cpe:2.3:o:cisco:ip_phone_8865_firmware:12.8\(1\):-:::::: cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:::::::: cpe:2.3:o:cisco:spa525g_firmware:-:::::::* cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:::::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):-:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr1:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr2:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr3:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr4b:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_firmware:10.3\(1\):sr6:::::: cpe:2.3:o:cisco:unified_ip_conference_phone_8831_for_third-party_call_control_firmware:-:::::::* cpe:2.3:o:cisco:wireless_ip_phone_8821-ex_firmware:::::::: cpe:2.3:o:cisco:wireless_ip_phone_8821_firmware::::::::
Vendors & Products		Cisco Cisco ip Conference Phone 7832 Cisco ip Conference Phone 7832 Firmware Cisco ip Conference Phone 7832 With Multiplatform Firmware Cisco ip Conference Phone 8832 Cisco ip Conference Phone 8832 Firmware Cisco ip Conference Phone 8832 With Multiplatform Firmware Cisco ip Phone 6821 Cisco ip Phone 6821 With Multiplatform Firmware Cisco ip Phone 6841 Cisco ip Phone 6841 With Multiplatform Firmware Cisco ip Phone 6851 Cisco ip Phone 6851 With Multiplatform Firmware Cisco ip Phone 6861 Cisco ip Phone 6861 With Multiplatform Firmware Cisco ip Phone 6871 Cisco ip Phone 6871 With Multiplatform Firmware Cisco ip Phone 7811 Cisco ip Phone 7811 Firmware Cisco ip Phone 7811 With Multiplatform Firmware Cisco ip Phone 7821 Cisco ip Phone 7821 Firmware Cisco ip Phone 7821 With Multiplatform Firmware Cisco ip Phone 7841 Cisco ip Phone 7841 Firmware Cisco ip Phone 7841 With Multiplatform Firmware Cisco ip Phone 7861 Cisco ip Phone 7861 Firmware Cisco ip Phone 7861 With Multiplatform Firmware Cisco ip Phone 8811 Cisco ip Phone 8811 Firmware Cisco ip Phone 8811 With Multiplatform Firmware Cisco ip Phone 8841 Cisco ip Phone 8841 Firmware Cisco ip Phone 8841 With Multiplatform Firmware Cisco ip Phone 8845 Cisco ip Phone 8845 Firmware Cisco ip Phone 8845 With Multiplatform Firmware Cisco ip Phone 8851 Cisco ip Phone 8851 Firmware Cisco ip Phone 8851 With Multiplatform Firmware Cisco ip Phone 8861 Cisco ip Phone 8861 Firmware Cisco ip Phone 8861 With Multiplatform Firmware Cisco ip Phone 8865 Cisco ip Phone 8865 Firmware Cisco ip Phone 8865 With Multiplatform Firmware Cisco spa525g Cisco spa525g Firmware Cisco unified Ip Conference Phone 8831 Cisco unified Ip Conference Phone 8831 Firmware Cisco unified Ip Conference Phone 8831 For Third-party Call Control Firmware Cisco wireless Ip Phone 8821 Cisco wireless Ip Phone 8821-ex Cisco wireless Ip Phone 8821-ex Firmware Cisco wireless Ip Phone 8821 Firmware

Mon, 18 Nov 2024 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 18 Nov 2024 15:45:00 +0000

Type	Values Removed	Values Added
Description		Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
Title		Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities
Weaknesses		CWE-120
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-rce-dos-U2PsSkz3 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-distupd-N87eB6Z3
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:X/RC:X/E:X'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2024-11-18T15:42:00.388Z

Updated: 2024-11-18T16:23:13.534Z

Reserved: 2020-11-13T00:00:00.000Z

Link: CVE-2021-1379

Vulnrichment

Updated: 2024-11-18T16:23:00.881Z

NVD

Status : Analyzed

Published: 2024-11-18T16:15:09.310

Modified: 2026-01-06T17:30:36.293

Link: CVE-2021-1379

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-120

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Projects

JSON object

JSON object

JSON object

JSON object

JSON object