Stack Overflow Vulnerability in Cisco IP Phone 7800 and 8800 Series

CVE-2022-20968

What is CVE-2022-20968?

The vulnerability in the Cisco Discovery Protocol processing feature impacts Cisco IP Phone 7800 and 8800 Series firmware. It arises from inadequate input validation of incoming Cisco Discovery Protocol packets. An attacker situated on the same network could exploit this flaw by dispatching specially crafted Cisco Discovery Protocol traffic. Successful exploitation could lead to a stack overflow, which may enable remote code execution or trigger a denial of service condition on the compromised device.

References