CVE-2024-20533

[kmccollum]

According this this CVE it is "A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware" How do can I tell if my phones have MPP firmware, or is this firmware only on the 8875?  The grammar is confusing me.

[Roger Kallberg · Accepted solution]

If you look at the affected products it’s clearer that it affects MPP firmware only.

The easiest way to tell if your devices are using MPP firmware or not would be to know what call control system you’re using. In general if it’s CM they’ll be using Enterprise firmware and if it’s Webex Calling or 3:re party control system they’ll be using MPP.

[kmccollum]

Thank you for the reply, @Roger Kallberg.  I am using CM, but beyond that is there a way to tell, or I just trust that because of CM that it is Enterprise firmware?

[Roger Kallberg]

With CM your devices would use Enterprise software. It is possible in theory to use MPP software, however then you’ll be setting up your devices as 3:rd party SIP devices and that’s quite unusual.

[Maren Mahoney]

The phone model listed on the back of the physical phone will have "3PCC" or "3PW" in the model number if it is a MPP model. If it is an Enterprise model it usually "CP-<model number>-K9=" or sometimes "CP-<model number>-W-K9=" for white phones.

Maren