CVE-2024-20445

Summary

CVE-2024-20445 is a vulnerability impacting the web UI of Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875. It allows unauthenticated, remote attackers to access sensitive information, such as call records, due to improper storage of such data within the SIP-based phones' web interfaces. An attacker can exploit this issue by navigating to an affected device's IP address with Web Access enabled. Notably, Web Access is disabled by default.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.