CVE-2020-3161
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
CVSS
—
No CVSS
EPSS
83.7%
p100
KEV
YES
Nov 3, 2021
Exploit Today
80
0-100
Published: — · Last modified: —
83.7%EPSS · 30 days83.7%
2026-06-302026-07-16
Product
Cisco / Cisco IP Phones
Vulnerability
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
No
Summary description
Cisco IP Phones contain an improper input validation vulnerability for HTTP requests. Exploitation could allow an attacker to execute code remotely with root privileges or cause a denial-of-service (DoS) condition.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-3161
No related CVEs by CWE or product.