References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-multi-vulns-cXAhCvS https://nvd.nist.gov/vuln/detail/CVE-2024-20376 https://avd.aliyun.com/detail?id=AVD-2024-20376 https://www.cnvd.org.cn/flaw/show/CNVD-2024-41620 https://www.nsfocus.net/vulndb/97175 http://cve.scap.org.cn/vulnerability/VHN-251948 https://access.redhat.com/security/cve/cve-2024-20376 https://gbhackers.com/cisco-ip-phone-vulnerability-2/ https://soc.cyber.wa.gov.au/advisories/20240503002-Cisco-IP-Phones-Vulnerability/ https://feedly.com/cve/CVE-2024-20376
Related VulnerabilitiesCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File UploadPoCavaya-phone-default-login: Avaya Phone Web Interface - Default Login思科系统(中国)网络技术有限公司Cisco AP WebUI存在弱口令PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassPoC3cx-installer: 3CX Phone System - Installer Page ExposureCisco Catalyst SD-WAN身份验证绕过漏洞Cisco Catalyst SD-WAN 权限绕过漏洞(CVE-2026-20127)PoCCVE-2024-3231: Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site ScriptingCisco Asyncos 整数溢出漏洞 可导致远程代码执行PoC福建科立讯通信指挥调度平台 /api/client/event/phoneeventlist.php SQL 注入漏洞PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster EnumerationCisco Any Router and Switch 默认口令漏洞