Vulnslist

There are no workarounds that address these vulnerabilities. However, disabling Web Access mitigates these vulnerabilities.

To enable or disable Web Access on a specific device, follow these steps:

Log in to the Communications Manager to which the phone is registered using administrative privileges, which allow modification of devices.
Choose Device > Phone.
Enter the search criteria in the search box and click Find.
Choose the appropriate device from the Device Name list.
Under Web Access, use the toggle button to choose Enabled or Disabled, and click Save.

To verify that the desired state has been set, enter the IP address of the phone into a browser window on a device that has internet access, and click Enter.

To enable or disable Web Access on multiple devices, use the Bulk Admin Tool (BAT) as detailed in the Bulk Administration Guide for Cisco Unified Communications Manager https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/bat/14SU1/cucm_b_bulk-administration-guide-14SU1/cucm_b_bulk-administration-guide-1251su2_chapter_01.html .

While this mitigation has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment.