Description
A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent attacker to cause a stack overflow on an affected device.
This vulnerability is due to insufficient input validation of received Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol traffic to an affected device. A successful exploit could allow the attacker to cause a stack overflow, resulting in possible remote code execution or a denial of service (DoS) condition on an affected device.
This vulnerability is due to insufficient input validation of received Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol traffic to an affected device. A successful exploit could allow the attacker to cause a stack overflow, resulting in possible remote code execution or a denial of service (DoS) condition on an affected device.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Session Initiation Protocol (SIP) Software | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
Configuration 11 [-]
| AND |
|
Configuration 12 [-]
| AND |
|
Configuration 13 [-]
| AND |
|
No data.
No data available yet.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-26218 | A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent attacker to cause a stack overflow on an affected device. This vulnerability is due to insufficient input validation of received Cisco Discovery Protocol packets. An attacker could exploit this vulnerability by sending crafted Cisco Discovery Protocol traffic to an affected device. A successful exploit could allow the attacker to cause a stack overflow, resulting in possible remote code execution or a denial of service (DoS) condition on an affected device. |
References
History
No history.
Subscriptions
Cisco
Subscribe
Ip Phone 7811
Subscribe
Ip Phone 7811 Firmware
Subscribe
Ip Phone 7821
Subscribe
Ip Phone 7821 Firmware
Subscribe
Ip Phone 7832
Subscribe
Ip Phone 7832 Firmware
Subscribe
Ip Phone 7841
Subscribe
Ip Phone 7841 Firmware
Subscribe
Ip Phone 7861
Subscribe
Ip Phone 7861 Firmware
Subscribe
Ip Phone 8811
Subscribe
Ip Phone 8811 Firmware
Subscribe
Ip Phone 8831
Subscribe
Ip Phone 8831 Firmware
Subscribe
Ip Phone 8832
Subscribe
Ip Phone 8832 Firmware
Subscribe
Ip Phone 8841
Subscribe
Ip Phone 8841 Firmware
Subscribe
Ip Phone 8845
Subscribe
Ip Phone 8845 Firmware
Subscribe
Ip Phone 8851
Subscribe
Ip Phone 8851 Firmware
Subscribe
Ip Phone 8861
Subscribe
Ip Phone 8861 Firmware
Subscribe
Ip Phone 8865
Subscribe
Ip Phone 8865 Firmware
Subscribe
MITRE
Status: PUBLISHED
Assigner: cisco
Published:
Updated: 2024-08-03T02:31:58.569Z
Reserved: 2021-11-02T13:28:29.197Z
Link: CVE-2022-20968
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-12-12T09:15:12.613
Modified: 2026-06-17T04:25:33.390
Link: CVE-2022-20968
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
-
CWE-787
Out-of-bounds Write