Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-3360 Details

Description

A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote attacker to view sensitive information on an affected device. The vulnerability is due to improper access controls on the web-based management interface of an affected device. An attacker could exploit this vulnerability by sending malicious requests to the device, which could allow the attacker to bypass access restrictions. A successful attack could allow the attacker to view sensitive information, including device call logs that contain names, usernames, and phone numbers of users of the device.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CNA: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-logs-2O7f7ExM	CVE	Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-logs-2O7f7ExM	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-863	Incorrect Authorization	[email protected]
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor	[email protected]

Affected Products

Product	Versions
cisco unified ip phone 6901 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_6901_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 6901	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_6901:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 6961 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_6961_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 6961	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_6961:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 6945 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_6945_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 6945	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_6945:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 6941 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_6941_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 6941	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_6941:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 6921 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_6921_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 6921	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_6921:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 6911 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_6911_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 6911	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_6911:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7832 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7832_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7832	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7832:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7861 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7861_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7861	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7861:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7841 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7841_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7841	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7841:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7821 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7821_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7821	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7821:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7811 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7811_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7811	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7811:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7937g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7937g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7937g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7937g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7975g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7975g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7975g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7975g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7965g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7965g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7965g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7965g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7962g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7962g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7962g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7962g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7961g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7961g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7961g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7961g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7960g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7960g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7960g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7960g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7945g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7945g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7945g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7945g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7942g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7942g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7942g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7942g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7941g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7941g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7941g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7941g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7940g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7940g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7940g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7940g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7931g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7931g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7931g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7931g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7911g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7911g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7911g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7911g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 7906g firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_7906g_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 7906g	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_7906g:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 8811 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_8811_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 8811	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_8811:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 8841 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_8841_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 8841	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_8841:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 8845 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_8845_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 8845	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_8845:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 8851 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_8851_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 8851	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_8851:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 8851nr firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_8851nr_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 8851nr	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_8851nr:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 8861 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_8861_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 8861	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_8861:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 8865 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_8865_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 8865	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_8865:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 8865nr firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_8865nr_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 8865nr	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_8865nr:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 8961 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_8961_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 8961	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_8961:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 8945 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_8945_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 8945	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_8945:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 8941 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_8941_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 8941	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_8941:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 9971 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_9971_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 9971	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_9971:-:::::::* Remediation No remediation found in references.
cisco unified ip phone 9951 firmware	<= 12.8\(1\)
CPE cpe:2.3:o:cisco:unified_ip_phone_9951_firmware:::::::: Remediation No remediation found in references.
cisco unified ip phone 9951	All versions
CPE cpe:2.3:h:cisco:unified_ip_phone_9951:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Aug 6, 2021	Reanalysis	[email protected]
Jun 24, 2020	Initial Analysis	[email protected]

CVE-2020-3360 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation