Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-01-20	CVE-2023-20018	Incorrect Authorization vulnerability in Cisco products A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to insufficient validation of user-supplied input. network low complexity cisco CWE-863	6.5
2022-01-14	CVE-2022-20660	Cleartext Storage of Sensitive Information vulnerability in Cisco products A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an affected device. low complexity cisco CWE-312	4.6