CVE-2020-16139

A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information

• http://packetstormsecurity.com/files/158819/Cisco-7937G-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
• https://www.blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/Exploit, Third Party Advisory
• https://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-phone-7940g/end_of_life_notice_c51-729487.htmlVendor Advisory
• http://packetstormsecurity.com/files/158819/Cisco-7937G-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
• https://www.blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/Exploit, Third Party Advisory
• https://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-phone-7940g/end_of_life_notice_c51-729487.htmlVendor Advisory

Published

Aug 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-16132Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-16134An issue was discovered on Swisscom Internet Box 2, Internet…8
• CVE-2020-16135libssh 0.9.4 has a NULL pointer dereference in tftpserver.c …5.9
• CVE-2020-16136In tgstation-server 4.4.0 and 4.4.1, an authenticated user w…7.7
• CVE-2020-16137A privilege escalation issue in Cisco Unified IP Conference …9.8
• CVE-2020-16138A denial-of-service issue in Cisco Unified IP Conference Sta…7.5
• CVE-2020-1614A Use of Hard-coded Credentials vulnerability exists in the …10
• CVE-2020-16140The search functionality of the Greenmart theme 2.4.2 for Wo…6.1
• CVE-2020-16142On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehic…3.5
• CVE-2020-16143The seafile-client client 7.0.8 for Seafile is vulnerable to…7.8
• CVE-2020-16144When using an object storage like S3 as the file store, when…5.7
• CVE-2020-16145Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS …6.1