CVE:CVE-2020-3360
CNNVD:CNNVD-202006-1136
Cisco IP Phone 8800 Series和Cisco IP Phone 7800 Series都是美国思科（Cisco）公司的产品。Cisco IP Phone 8800 Series是一款8800系列的IP电话。Cisco IP Phone 7800 Series是一款7800系列IP电话。
Cisco IP Phone 7800 Series和8800 Series（与Unified Communications Manager 12.8(1)及之前版本兼容）中的Web Access功能存在信息泄露漏洞，该漏洞源于不正确的访问控制。远程攻击者可通过发送恶意的请求利用该漏洞绕过访问控制，查看敏感信息，包括设备调用日志（包括名称，用户名和用户图片数）。
solution:Upgrade cisco unified_ip_phone_6901_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_6961_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_6945_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_6941_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_6921_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_6911_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7832_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7861_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7841_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7821_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7811_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7937g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7975g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7965g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7962g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7961g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7960g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7945g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7942g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7941g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7940g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7931g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7911g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_7906g_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_8811_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_8841_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_8845_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_8851_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_8851nr_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_8861_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_8865_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_8865nr_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_8961_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_8945_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_8941_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_9971_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]; Upgrade cisco unified_ip_phone_9951_firmware to a higher version than 12.8\(1\,and avoid the version (,12.8\(1\)]