Lucene search

[email protected]CVE-2023-20047

HistoryJan 20, 2023 - 7:15 a.m.

CVE-2023-20047

2023-01-2007:15:17

CWE-400

CWE-770

[email protected]

web.nvd.nist.gov

cisco

webex

room phone

vulnerability

lldp

dos

nvd

cve-2023-20047

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

12.9%

JSON

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco Webex Room Phone and Cisco Webex Share devices could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to insufficient resource allocation. An attacker could exploit this vulnerability by sending crafted LLDP traffic to an affected device. A successful exploit could allow the attacker to exhaust the memory resources of the affected device, resulting in a crash of the LLDP process. If the affected device is configured to support LLDP only, this could cause an interruption to inbound and outbound calling. By default, these devices are configured to support both Cisco Discovery Protocol and LLDP. To recover operational state, the affected device needs a manual restart.

Affected configurations

NVD

Node

ciscowebex_room_phone_firmwareRange≤1.2.0

AND

ciscowebex_room_phoneMatch-

Node

ciscowebex_share_firmwareRange≤1.2.0

AND

ciscowebex_shareMatch-

Node

ciscosip_ip_phone_softwareRange≤1.2.0

CPENameOperatorVersion
cisco:webex_room_phone_firmwarecisco webex room phone firmwarele1.2.0

CPE	Name	Operator	Version
cisco:webex_room_phone_firmware	cisco webex room phone firmware	le	1.2.0

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco Webex Room Phone",
    "versions": [
      {
        "version": "RoomPhone 1.1.0",
        "status": "affected"
      },
      {
        "version": "RoomPhone 1.2.0",
        "status": "affected"
      },
      {
        "version": "RoomPhone 1.2.0SR1",
        "status": "affected"
      },
      {
        "version": "RoomPhone 1.2.0SR2",
        "status": "affected"
      }
    ]
  }
]