High severity8.6NVD Advisory· Published Jan 20, 2023· Updated Jun 17, 2026
CVE-2023-20018
CVE-2023-20018
Description
A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to access certain parts of the web interface that would normally require authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
24- cpe:2.3:o:cisco:ip_phone_7800_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_7811_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_7821_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_7832_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_7841_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_7861_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_8800_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_8811_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_8821-ex_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_8821_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_8831_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_8832_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_8841_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_8845_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_8851_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phone_8865_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:ip_phones_8832_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:unified_ip_phone_8851nr_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:unified_ip_phone_8865nr_firmware:*:*:*:*:*:*:*:*Range: <14.1\(1\)sr2
- cpe:2.3:o:cisco:wireless_ip_phone_8821-ex_firmware:*:*:*:*:*:*:*:*Range: <11.0\(6\)sr4
- cpe:2.3:o:cisco:wireless_ip_phone_8821_firmware:*:*:*:*:*:*:*:*Range: <11.0\(6\)sr4
- Range: 9.3(4) 3rd Party
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.