CVE:CVE-2022-20774
CNNVD:CNNVD-202204-2458
Cisco IP Phone是美国思科（Cisco）公司的一个硬件设备。提供通话功能的IP电话。
Cisco IP Phone 6800、7800、8800版本存在跨站请求伪造漏洞，该漏洞源于基于web的管理界面中存在漏洞。远程攻击者利用该漏洞对受影响系统的基于web界面的用户进行跨站点请求伪造（CSRF）攻击。
solution:Upgrade cisco ip_phone_6871_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_6861_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_6851_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_6841_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_6825_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_7861_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_7841_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_7832_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_7821_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_7811_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_8865_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_8861_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_8851_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_8845_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_8841_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_8832_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5); Upgrade cisco ip_phone_8811_firmware to a higher version than 11.3.5,and avoid the version (,11.3.5)