IP Phone 6821 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2020-02-05	CVE-2020-3111	Improper Input Validation vulnerability in Cisco products A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. low complexity cisco CWE-20	8.8
2020-01-26	CVE-2019-16008	Cross-site Scripting vulnerability in Cisco products A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of an affected system. network low complexity cisco CWE-79	5.4