VulnerabilityModified
CVE-2011-1602
The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426.
MEDIUM 6.6EPSS 0.26%
Does this matter?
Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.
Description
The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426.
- CVSS 2.0
- 6.6 MEDIUMAV:L/AC:M/Au:S/C:C/I:C/A:C
- EPSS
- 0.26% probability · 18th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- cisco/unified ip phone 7906 · cisco/unified ip phone 7911g · cisco/unified ip phone 7931g · cisco/unified ip phone 7941g · cisco/unified ip phone 7941g-ge · cisco/unified ip phone 7942g · cisco/unified ip phone 7945g · cisco/unified ip phone 7961g · cisco/unified ip phone 7961g-ge · cisco/unified ip phone 7962g · cisco/unified ip phone 7965g · cisco/unified ip phone 7970g · cisco/unified ip phone 7971g-ge · cisco/unified ip phone 7975g · cisco/skinny client control protocol software
- Source
- psirt@cisco.com
References
- http://osvdb.org/72717
- http://secunia.com/advisories/44814/
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtmlVendor Advisory
- http://www.securityfocus.com/bid/48074
- http://www.securitytracker.com/id?1025588
- http://osvdb.org/72717
- http://secunia.com/advisories/44814/
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtmlVendor Advisory
- http://www.securityfocus.com/bid/48074
- http://www.securitytracker.com/id?1025588
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.