SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2011-1603

Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815.

MEDIUM 6.6EPSS 0.26%

Does this matter?

Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.

Description

Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815.

CVSS 2.0
6.6 MEDIUMAV:L/AC:M/Au:S/C:C/I:C/A:C
EPSS
0.26% probability · 18th percentile
CISA KEV
Not listed
Weakness
CWE-264
Affected
cisco/unified ip phone 7906 · cisco/unified ip phone 7911g · cisco/unified ip phone 7931g · cisco/unified ip phone 7941g · cisco/unified ip phone 7941g-ge · cisco/unified ip phone 7942g · cisco/unified ip phone 7945g · cisco/unified ip phone 7961g · cisco/unified ip phone 7961g-ge · cisco/unified ip phone 7962g · cisco/unified ip phone 7965g · cisco/unified ip phone 7970g · cisco/unified ip phone 7971g-ge · cisco/unified ip phone 7975g · cisco/skinny client control protocol software
Source
psirt@cisco.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.