Medium severity6.8NVD Advisory· Published Jul 22, 2021· Updated Jun 17, 2026

CVE-2021-33478

Description

The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment (TEE) of an affected device. This, for example, affects certain Cisco IP Phone and Wireless IP Phone products before 2021-07-07. Exploitation is possible only when the attacker can disassemble the device in order to control the voltage/current for chip pins.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./IP Phone 8800 Firmware
cpe:2.3:o:cisco:ip_phone_8800_firmware:*:*:*:*:*:*:*:*
Range: <14.0\(1\)
Cisco Systems, Inc./IP Phone 8800 Series With Multiplatform Firmware
cpe:2.3:o:cisco:ip_phone_8800_series_with_multiplatform_firmware:*:*:*:*:*:*:*:*
Range: <11.3\(4\)
Cisco Systems, Inc./IP Phone 8811 Firmware
cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:*
Range: <14.0\(1\)
Cisco Systems, Inc./IP Phone 8811 With Multiplatform Firmware
cpe:2.3:o:cisco:ip_phone_8811_with_multiplatform_firmware:*:*:*:*:*:*:*:*
Range: <11.3\(4\)
Cisco Systems, Inc./IP Phone 8841 Firmware
cpe:2.3:o:cisco:ip_phone_8841_firmware:*:*:*:*:*:*:*:*
Range: <14.0\(1\)
Cisco Systems, Inc./IP Phone 8841 With Multiplatform Firmware
cpe:2.3:o:cisco:ip_phone_8841_with_multiplatform_firmware:*:*:*:*:*:*:*:*
Range: <11.3\(4\)
Cisco Systems, Inc./IP Phone 8845 Firmware
cpe:2.3:o:cisco:ip_phone_8845_firmware:*:*:*:*:*:*:*:*
Range: <14.0\(1\)
Cisco Systems, Inc./IP Phone 8845 With Multiplatform Firmware
cpe:2.3:o:cisco:ip_phone_8845_with_multiplatform_firmware:*:*:*:*:*:*:*:*
Range: <11.3\(4\)
Cisco Systems, Inc./IP Phone 8851 Firmware
cpe:2.3:o:cisco:ip_phone_8851_firmware:*:*:*:*:*:*:*:*
Range: <14.0\(1\)
Cisco Systems, Inc./IP Phone 8851 With Multiplatform Firmware
cpe:2.3:o:cisco:ip_phone_8851_with_multiplatform_firmware:*:*:*:*:*:*:*:*
Range: <11.3\(4\)
Cisco Systems, Inc./IP Phone 8861 Firmware
cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:*
Range: <14.0\(1\)
Cisco Systems, Inc./IP Phone 8861 With Multiplatform Firmware
cpe:2.3:o:cisco:ip_phone_8861_with_multiplatform_firmware:*:*:*:*:*:*:*:*
Range: <11.3\(4\)
Cisco Systems, Inc./IP Phone 8865 Firmware
cpe:2.3:o:cisco:ip_phone_8865_firmware:*:*:*:*:*:*:*:*
Range: <14.0\(1\)
Cisco Systems, Inc./IP Phone 8865 With Multiplatform Firmware
cpe:2.3:o:cisco:ip_phone_8865_with_multiplatform_firmware:*:*:*:*:*:*:*:*
Range: <11.3\(4\)
Cisco Systems, Inc./Wireless IP Phone 8821 Firmware
cpe:2.3:o:cisco:wireless_ip_phone_8821_firmware:*:*:*:*:*:*:*:*
Range: <11.0\(6\)sr1
Broadcom/MediaxChange firmwaredescription
Broadcom Corporation/MediaxChange firmwarellm-create
Range: <2021-07-07
Cisco Systems, Inc./IP Phonellm-fuzzy
Range: <2021-07-07

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-brcm-mxc-jul2021-26LqUZUhnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000