CVE-2021-33478 - CVE House
Back to Database
Status published Medium CVE-2021-33478

The TrustZone implementation in certain Broadcom MediaxChange firmware could allow...

Vulnerability Description

The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment (TEE) of an affected device. This, for example, affects certain Cisco IP Phone and Wireless IP Phone products before 2021-07-07. Exploitation is possible only when the attacker can disassemble the device in order to control the voltage/current for chip pins.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-33478

Credits & Attribution

No credits recorded in the NVD database.

References

More from cisco

View All →
CVE-2025-27091
OpenH264 Decoding Functions Heap Overflow Vulnerability
High 8.6
CVE-2023-25653
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
High 7.5
CVE-2020-16139
A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0...
High 7.5
CVE-2020-16138
A denial-of-service issue in Cisco Unified IP Conference Station 7937G...
High 7.5
CVE-2020-16137
A privilege escalation issue in Cisco Unified IP Conference Station...
Critical 9.8

Affected Vendor

Affected Software

ip phone 8800 firmware, ip phone 8800 series with multiplatform firmware, ip phone 8811 firmware, ip phone 8811 with multiplatform firmware, ip phone 8841 firmware, ip phone 8841 with multiplatform firmware, ip phone 8845 firmware, ip phone 8845 with multiplatform firmware, ip phone 8851 firmware, ip phone 8851 with multiplatform firmware, ip phone 8861 firmware, ip phone 8861 with multiplatform firmware, ip phone 8865 firmware, ip phone 8865 with multiplatform firmware, wireless ip phone 8821 firmware
Vulnerable Versions:
0

Timeline

Official Publish: July 22nd, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.