Details of VAR-202301-0952

ID

VAR-202301-0952

CVE

CVE-2023-20018

TITLE

Cisco IP Phone 7800 and 8800 Fraudulent Authentication Vulnerability in Series

Trust: 0.8

sources: JVNDB: JVNDB-2023-002345

DESCRIPTION

A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to access certain parts of the web interface that would normally require authentication

Trust: 1.71

sources: NVD: CVE-2023-20018 // JVNDB: JVNDB-2023-002345 // VULMON: CVE-2023-20018

AFFECTED PRODUCTS

vendor:	cisco	model:	ip phone 8865	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 7861	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 7800	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 8821	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 8831	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 8851	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 8861	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	wireless ip phone 8821-ex	scope:	lt	version:	11.0\(6\)sr4	Trust: 1.0
vendor:	cisco	model:	ip phone 8832	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 7841	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	unified ip phone 8865nr	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	unified ip phone 8851nr	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	wireless ip phone 8821	scope:	lt	version:	11.0\(6\)sr4	Trust: 1.0
vendor:	cisco	model:	ip phone 7811	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 8845	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 7821	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 8821-ex	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 8800	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 8841	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phones 8832	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 7832	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	cisco	model:	ip phone 8811	scope:	lt	version:	14.1\(1\)sr2	Trust: 1.0
vendor:	シスコシステムズ	model:	ip phone 7821	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	ip phone 7841	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	ip phone 8811	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	ip phone 7811	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	ip phone 8821-ex	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	ip phone 7832	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	ip phone 8800	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	ip phone 8821	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	ip phone 7861	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	cisco ip phone 7800 シリーズ	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2023-002345 // NVD: CVE-2023-20018

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2023-20018
value:	MEDIUM
Trust: 1.0
ykramarz@cisco.com:	CVE-2023-20018
value:	HIGH
Trust: 1.0
NVD:	CVE-2023-20018
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202301-1004
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2023-20018
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	2.5
version:	3.1
Trust: 1.0
ykramarz@cisco.com:	CVE-2023-20018
baseSeverity:	HIGH
baseScore:	8.6
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	4.7
version:	3.1
Trust: 1.0
NVD:	CVE-2023-20018
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2023-002345 // CNNVD: CNNVD-202301-1004 // NVD: CVE-2023-20018 // NVD: CVE-2023-20018

PROBLEMTYPE DATA

problemtype:	CWE-288	Trust: 1.0
problemtype:	CWE-863	Trust: 1.0
problemtype:	Illegal authentication (CWE-863) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2023-002345 // NVD: CVE-2023-20018

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202301-1004

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202301-1004

PATCH

title:	cisco-sa-ip-phone-auth-bypass-pSqxZRPR	url:	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-auth-bypass-pSqxZRPR	Trust: 0.8
title:	Cisco: Cisco IP Phone 7800 and 8800 Series Web Management Interface Authentication Bypass Vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-ip-phone-auth-bypass-pSqxZRPR	Trust: 0.1

sources: VULMON: CVE-2023-20018 // JVNDB: JVNDB-2023-002345

EXTERNAL IDS

db:	NVD	id:	CVE-2023-20018	Trust: 3.3
db:	JVNDB	id:	JVNDB-2023-002345	Trust: 0.8
db:	AUSCERT	id:	ESB-2023.0179	Trust: 0.6
db:	CNNVD	id:	CNNVD-202301-1004	Trust: 0.6
db:	VULMON	id:	CVE-2023-20018	Trust: 0.1

sources: VULMON: CVE-2023-20018 // JVNDB: JVNDB-2023-002345 // CNNVD: CNNVD-202301-1004 // NVD: CVE-2023-20018

REFERENCES

url:	https://sec.cloudapps.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-ip-phone-auth-bypass-psqxzrpr	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2023-20018	Trust: 0.8
url:	https://www.auscert.org.au/bulletins/esb-2023.0179	Trust: 0.6
url:	https://cxsecurity.com/cveshow/cve-2023-20018/	Trust: 0.6
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2023-20018 // JVNDB: JVNDB-2023-002345 // CNNVD: CNNVD-202301-1004 // NVD: CVE-2023-20018

SOURCES

db:	VULMON	id:	CVE-2023-20018
db:	JVNDB	id:	JVNDB-2023-002345
db:	CNNVD	id:	CNNVD-202301-1004
db:	NVD	id:	CVE-2023-20018

LAST UPDATE DATE

2024-08-14T14:17:30.309000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2023-20018	date:	2023-01-20T00:00:00
db:	JVNDB	id:	JVNDB-2023-002345	date:	2023-07-05T07:48:00
db:	CNNVD	id:	CNNVD-202301-1004	date:	2023-02-02T00:00:00
db:	NVD	id:	CVE-2023-20018	date:	2024-01-25T17:15:25.060

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2023-20018	date:	2023-01-20T00:00:00
db:	JVNDB	id:	JVNDB-2023-002345	date:	2023-07-05T00:00:00
db:	CNNVD	id:	CNNVD-202301-1004	date:	2023-01-12T00:00:00
db:	NVD	id:	CVE-2023-20018	date:	2023-01-20T07:15:13.633