CVE:CVE-2020-3111
CNNVD:CNNVD-202002-128
Cisco IP Phone中的Cisco Discovery Protocol实现存在输入验证错误漏洞，该漏洞程序在处理Cisco Discovery Protocol消息时，缺少检查。攻击者可通过发送恶意的Cisco Discovery Protocol数据包利用该漏洞以root权限执行代码或造成拒绝服务。
solution:Upgrade cisco ip_conference_phone_7832_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_conference_phone_7832_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_conference_phone_8832_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_conference_phone_8832_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_6821_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_6841_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_6851_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_6861_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_6871_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_7811_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_phone_7811_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_7821_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_phone_7821_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_7841_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_phone_7841_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_7861_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_phone_7861_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_8811_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_phone_8811_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_8841_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_phone_8841_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_8851_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_phone_8851_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_8861_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_phone_8861_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_8845_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_phone_8845_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco ip_phone_8865_firmware to a higher version than 12.7\(1\,and avoid the version (,12.7\(1\)); Upgrade cisco ip_phone_8865_with_multiplatform_firmware to a higher version than 11.3\(1\sr1,and avoid the version (,11.3\(1\)sr1); Upgrade cisco unified_ip_conference_phone_8831_firmware to a higher version than 10.3\(1\sr6,and avoid the version (,10.3\(1\)sr6); Upgrade cisco unified_ip_conference_phone_8831_for_third-party_call_control_firmware to a higher version than -; Upgrade cisco wireless_ip_phone_8821_firmware to a higher version than 11.0\(5\sr2,and avoid the version (,11.0\(5\)sr2); Upgrade cisco wireless_ip_phone_8821-ex_firmware to a higher version than 11.0\(5\sr2,and avoid the version (,11.0\(5\)sr2)