Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2020-04-15	CVE-2020-3161	Improper Input Validation vulnerability in Cisco products A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. network low complexity cisco CWE-20 critical	9.8
2019-03-22	CVE-2019-1716	Improper Input Validation vulnerability in Cisco products A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code. network low complexity cisco CWE-20 critical	9.8