Vulnerabilities > Cisco > IP Phone 8800 Series Firmware > 10.3.2

DATE CVE VULNERABILITY TITLE RISK
2016-06-04 CVE-2016-1403 Improper Input Validation vulnerability in Cisco IP Phone 8800 Series Firmware
CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005.
local
low complexity
cisco CWE-20
7.2
7.2
2016-04-21 CVE-2015-6360 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco products
The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
network
low complexity
cisco CWE-119
7.5
7.5