CVE-2018-0341

N/A

Published: July 16, 2018 at 05:00 PM UTC

Updated: June 17, 2026 at 01:30 AM UTC

13 products affected across 1 vendorIP Phone Multiplatform FirmwareIp Phone 8861IP Phone 7861

Using Cisco IP Phone 6800, 7800, and 8800 unknown by N/A?

Get instant alerts when new vulnerabilities affect Cisco IP Phone 6800, 7800, and 8800 unknown - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 6%

SSVC

No known exploit

Description

A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware before 11.2(1) could allow an authenticated, remote attacker to perform a command injection and execute commands with the privileges of the web server. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including arbitrary shell commands in a specific user input field. Cisco Bug IDs: CSCvi51426.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IP Phone Multiplatform Firmware · Cisco

95%

11.1(2)

cisco-ip-phone-6841 (environment) · cisco-ip-phone-6851 (environment) · cisco-ip-phone-7811 (environment) · cisco-ip-phone-7821 (environment) · cisco-ip-phone-7841 (environment) · cisco-ip-phone-7861 (environment) · cisco-ip-phone-8811 (environment) · cisco-ip-phone-8841 (environment) · cisco-ip-phone-8845 (environment) · cisco-ip-phone-8851 (environment) · cisco-ip-phone-8861 (environment) · cisco-ip-phone-8865 (environment)

IP Phone 6841 · Ciscodevice

80%

All versions

IP Phone 6851 · Ciscodevice

80%

All versions

IP Phone 7811 · Ciscodevice

80%

All versions

IP Phone 7821 · Ciscodevice

80%

All versions