IP
Product
IP Phone 8861 Firmware
On CISA KEVExploited in the wild
22
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 11Low 0
Watch
Add IP Phone 8861 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3161 In wildKEV | 9.8 | Apr 15 | Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability Affected: 10.3(1)es14; 11.0(1); 11.0(5)sr1 |
| CVE-2023-20078 | 9.8 | Mar 3 | Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a… Affected: before 11.3.7sr1 |
| CVE-2022-20968 | 8.8 | Dec 12 | A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent attacker to cause a… Affected: 9.3(3); 9.3(4); 9.3(4)sr1; 9.3(4)sr2; 9.3(4)sr3; 10.1(1)sr1; +34 more |
| CVE-2020-3111 | 8.8 | Feb 5 | A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root… Affected: before 12.7\(1\) |
| CVE-2022-20774 | 8.1 | Apr 6 | A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to… Affected: before 11.3.5 |
| CVE-2025-20350 | 7.5 | Oct 15 | Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Denial of Service Vulnerability Affected: before 14.3\(1\); 14.3(1); 14.3(1) |
| CVE-2025-20336 | 7.5 | Sep 3 | Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Disclosure Vulnerability Affected: before 14.3\(1\); 14.3(1); 14.3(1) |
| CVE-2023-20079 | 7.5 | Mar 3 | Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a… Affected: before 11.3.7sr1 |
| CVE-2020-3574 | 7.5 | Nov 6 | A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop responding to incoming… Affected: before 11.3.2 |
| CVE-2019-1922 | 7.5 | Jul 6 | A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 11.5(1); 12.5(1) |
| CVE-2019-1635 | 7.5 | May 3 | A vulnerability in the call-handling functionality of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated,… Affected: 9.3(4)sr3; 10.3(1)sr4b; 11.0(4)sr2; 12.1(1)sr1 |
| CVE-2021-33478 | 6.8 | Jul 22 | The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the… Affected: before 14.0\(1\) |
| CVE-2021-1379 | 6.5 | Nov 18 | Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities Affected: before 12.8\(1\); 12.8(1) |
| CVE-2023-20018 | 6.5 | Jan 20 | A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an… Affected: before 14.1\(1\)sr2 |
| CVE-2020-26141 | 6.5 | May 11 | An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H Affected: before 11.3\(5\); before 14.1\(1\) |
| CVE-2019-1684 | 6.5 | Feb 21 | Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol and Link Layer Discovery Protocol Denial of Service Vulnerability Affected: before 12.6\(1\)mn80 |
| CVE-2025-20351 | 6.1 | Oct 15 | Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Cross-Site Scripting Vulnerability Affected: before 14.3\(1\); 14.3(1); 14.3(1) |
| CVE-2021-34711 | 5.5 | Oct 6 | A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system Affected: before 14.1\(1\) |
| CVE-2019-16008 | 5.4 | Jan 26 | A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to conduct a… Affected: before 11.3\(1\) |
| CVE-2025-20335 | 5.3 | Sep 3 | Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Arbitrary File Write Vulnerability Affected: before 14.3\(1\); 14.3(1); 14.3(1) |
| CVE-2024-20445 | 5.3 | Nov 6 | Cisco IP Phone 7800, 8800, and 9800 Series Information Disclosure Vulnerability Affected: before 14.3\(1\) |
| CVE-2022-20660 | 4.6 | Jan 14 | A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from… Affected: before 14.1\(1\) |
Showing 22