Cleartext storage of sensitive information in Cisco Systems, Inc products - CVE-2022-20660

Vulnerability identifier: #VU59961

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-20660

CWE-ID: CWE-312

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to gain access to potentially sensitive information.

The vulnerability exists due to unencrypted storage of confidential information. An attacker with physical access can obtain confidential information from the device.

Cisco Unified IP Conference Phone 8831
Cisco Unified IP Conference Phone 8831 for Third-Party Call Control
Unified IP Phone 7945G
Unified IP Phone 7965G
Unified IP Phone 7975G
Unified SIP Phone 3905
Cisco Wireless IP Phone 8821
Cisco Wireless IP Phone 8821-EX
Cisco IP Conference Phone 7832
Cisco IP Conference Phone 8832
Cisco IP Phone 7811
Cisco IP Phone 7821
Cisco IP Phone 7841
Cisco IP Phone 7861
Cisco IP Phone 8811
Cisco IP Phone 8841
Cisco IP Phone 8845
Cisco IP Phone 8851
Cisco IP Phone 8861
Cisco IP Phone 8865

Install updates from vendor's website.

Unified SIP Phone 3905 - update to 9.4(1)SR5
Cisco Wireless IP Phone 8821 - update to 11.0(6)Sr2
Cisco Wireless IP Phone 8821-EX - update to 11.0(6)SR2
Cisco IP Conference Phone 7832 - update to 14.1(1)
Cisco IP Conference Phone 8832 - update to 14.1(1)
Cisco IP Phone 7811 - update to 14.1(1)
Cisco IP Phone 7821 - update to 14.1(1)
Cisco IP Phone 7841 - update to 14.1(1)
Cisco IP Phone 7861 - update to 14.1(1)
Cisco IP Phone 8811 - update to 14.1(1)
Cisco IP Phone 8841 - update to 14.1(1)
Cisco IP Phone 8845 - update to 14.1(1)
Cisco IP Phone 8851 - update to 14.1(1)
Cisco IP Phone 8861 - update to 14.1(1)
Cisco IP Phone 8865 - update to 14.1(1)

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ip-phone-info-disc-fRdJfOxA
• http://seclists.org/fulldisclosure/2022/Jan/34
• http://packetstormsecurity.com/files/165567/Cisco-IP-Phone-Cleartext-Password-Storage.html

• Cleartext storage of sensitive information in Cisco IP Phones