Cisco released security patches for vulnerabilities present in IP Phone 7800 and 8800 series. An attacker could exploit most of the flaws remotely without being authenticated. The company says that it has no knowledge of any of the issues being exploited in the wild. The vulnerabilities with the highest severity score, 8.1 out of 10, are a path traversal and a cross-site request forgery (CSRF) The vulnerabilities are in firmware versions 11.0(5) and 12.5(1)SR.
Source: https://www.bleepingcomputer.com/news/security/cisco-fixes-high-severity-vulnerabilities-in-ip-phone-77800-8800/