CVE:CVE-2020-3161
CNNVD:CNNVD-202004-1099
Cisco IP Phone 7811等都是美国思科（Cisco）公司的一款IP电话。
多款Cisco产品的Web server中存在输入验证错误漏洞，该漏洞源于程序没有对HTTP请求进行正确的输入验证。攻击者可借助特制HTTP请求利用该漏洞以root权限执行代码或造成拒绝服务。以下产品及版本受到影响：Cisco IP Phone 7811；IP Phone 7821；IP Phone 7841；IP Phone 7861；IP Phone 8811；IP Phone 8841；IP Phone 8845；IP Phone 8851；IP Phone 8861；IP Phone 8865；Unified IP Conference Phone 8831；Wireless IP Phone 8821；Wireless IP Phone 8821-EX。
solution:Upgrade cisco ip_phone_8865_firmware to a higher version than 10.3(1es14,11.0(1,11.0(5sr1,and avoid the version 10.3(1)es14,11.0(1),11.0(5)sr1; Upgrade cisco ip_phone_8851_firmware to a higher version than 10.3(1es14,11.0(1,11.0(5sr1,and avoid the version 10.3(1)es14,11.0(1),11.0(5)sr1; Upgrade cisco ip_phone_7841_firmware to a higher version than 11.0(1,and avoid the version 11.0(1); Upgrade cisco ip_phone_7821_firmware to a higher version than 11.0(1,and avoid the version 11.0(1); Upgrade cisco ip_phone_8811_firmware to a higher version than 10.3(1es14,11.0(1,11.0(5sr1,and avoid the version 10.3(1)es14,11.0(1),11.0(5)sr1; Upgrade cisco ip_phone_8861_firmware to a higher version than 10.3(1es14,11.0(1,11.0(5sr1,and avoid the version 10.3(1)es14,11.0(1),11.0(5)sr1; Upgrade cisco ip_phone_8845_firmware to a higher version than 10.3(1es14,11.0(1,11.0(5sr1,and avoid the version 10.3(1)es14,11.0(1),11.0(5)sr1; Upgrade cisco ip_phone_7861_firmware to a higher version than 11.0(1,and avoid the version 11.0(1); Upgrade cisco ip_phone_8841_firmware to a higher version than 10.3(1es14,11.0(1,11.0(5sr1,and avoid the version 10.3(1)es14,11.0(1),11.0(5)sr1; Upgrade cisco ip_phone_7811_firmware to a higher version than 11.0(1,and avoid the version 11.0(1); Upgrade cisco ip_phone_8821_firmware to a higher version than 10.3(1es14,11.0(1,11.0(5sr1,and avoid the version 10.3(1)es14,11.0(1),11.0(5)sr1; Upgrade cisco ip_phone_8821-ex_firmware to a higher version than 10.3(1es14,11.0(1,11.0(5sr1,and avoid the version 10.3(1)es14,11.0(1),11.0(5)sr1; Upgrade cisco 8831_firmware to a higher version than 10.3(1es14,11.0(1,11.0(5sr1,and avoid the version 10.3(1)es14,11.0(1),11.0(5)sr1