Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-01-14	CVE-2022-20660	Cleartext Storage of Sensitive Information vulnerability in Cisco products A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an affected device. low complexity cisco CWE-312	4.6
2020-06-18	CVE-2020-3360	Incorrect Authorization vulnerability in Cisco products A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote attacker to view sensitive information on an affected device. network low complexity cisco CWE-863	5.3