Cisco IP Phone Discovery Protocol input validation

Summaryinfo

A vulnerability described as critical has been identified in Cisco IP Phone. This issue affects some unknown processing of the component Discovery Protocol. Such manipulation leads to input validation. This vulnerability is traded as CVE-2020-3111. Access to the local network is required for this attack to succeed. There is no exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Cisco IP Phone (IP Phone Software) (unknown version). It has been rated as critical. Affected by this issue is an unknown code block of the component Discovery Protocol. The manipulation with an unknown input leads to a input validation vulnerability. Using CWE to declare the problem leads to CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Impacted is confidentiality, integrity, and availability. CVE summarizes:

A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when processing Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to the targeted IP phone. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

The weakness was shared 02/05/2020 as cisco-sa-20200205-voip-phones- as confirmed advisory (Website). The advisory is available at tools.cisco.com. This vulnerability is handled as CVE-2020-3111 since 12/12/2019. Access to the local network is required for this attack. No form of authentication is required for exploitation. The technical details are unknown and an exploit is not available. The advisory points out:

The vulnerability is due to missing checks when processing Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to the targeted IP phone. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition.

Upgrading eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• IP Phone Software

Vendor

• Cisco

Name

• IP Phone

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion