Ip Phone 6871 With Multiplatform Firmware CVE-2024-20357

This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could exploit this vulnerability by sending a crafted XML request to an affected device. A successful exploit could allow the attacker to initiate calls or play sounds on the device. Affected products include: Cisco Ip Phone 6871 With Multiplatform Firmware, Cisco Ip Phone 7811 With Multiplatform Firmware, Cisco Ip Phone 7821 With Multiplatform Firmware, Cisco Ip Phone 7832 With Multiplatform Firmware, Cisco Ip Phone 7841 With Multiplatform Firmware.