CVE-2021-1379

Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. It has a CVSS v3.1 base score of 6.5 (MEDIUM).

CVE-2021-1379 has a CVSS v3.1 score of 6.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

CVE-2021-1379 affects products from cisco, specifically: ip_conference_phone_7832, ip_conference_phone_7832_firmware, ip_conference_phone_7832_with_multiplatform_firmware, ip_conference_phone_8832, ip_conference_phone_8832_firmware, ip_conference_phone_8832_with_multiplatform_firmware, ip_phone_6821, ip_phone_6821_with_multiplatform_firmware, ip_phone_6841, ip_phone_6841_with_multiplatform_firmware, ip_phone_6851, ip_phone_6851_with_multiplatform_firmware, ip_phone_6861, ip_phone_6861_with_multiplatform_firmware, ip_phone_6871, ip_phone_6871_with_multiplatform_firmware, ip_phone_7811, ip_phone_7811_firmware, ip_phone_7811_with_multiplatform_firmware, ip_phone_7821, ip_phone_7821_firmware, ip_phone_7821_with_multiplatform_firmware, ip_phone_7841, ip_phone_7841_firmware, ip_phone_7841_with_multiplatform_firmware, ip_phone_7861, ip_phone_7861_firmware, ip_phone_7861_with_multiplatform_firmware, ip_phone_8811, ip_phone_8811_firmware, ip_phone_8811_with_multiplatform_firmware, ip_phone_8841, ip_phone_8841_firmware, ip_phone_8841_with_multiplatform_firmware, ip_phone_8845, ip_phone_8845_firmware, ip_phone_8845_with_multiplatform_firmware, ip_phone_8851, ip_phone_8851_firmware, ip_phone_8851_with_multiplatform_firmware, ip_phone_8861, ip_phone_8861_firmware, ip_phone_8861_with_multiplatform_firmware, ip_phone_8865, ip_phone_8865_firmware, ip_phone_8865_with_multiplatform_firmware, spa525g, spa525g_firmware, unified_ip_conference_phone_8831, unified_ip_conference_phone_8831_firmware, unified_ip_conference_phone_8831_for_third-party_call_control_firmware, wireless_ip_phone_8821, wireless_ip_phone_8821-ex, wireless_ip_phone_8821-ex_firmware, wireless_ip_phone_8821_firmware. Check the affected products table above for specific version ranges.

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.