VulnerabilityModified
CVE-2011-1637
Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.
LOW 1.5EPSS 0.27%
Does this matter?
Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.
- CVSS 2.0
- 1.5 LOWAV:L/AC:M/Au:S/C:P/I:N/A:N
- EPSS
- 0.27% probability · 19th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- cisco/unified ip phone 7906 · cisco/unified ip phone 7911g · cisco/unified ip phone 7931g · cisco/unified ip phone 7941g · cisco/unified ip phone 7941g-ge · cisco/unified ip phone 7942g · cisco/unified ip phone 7945g · cisco/unified ip phone 7961g · cisco/unified ip phone 7961g-ge · cisco/unified ip phone 7962g · cisco/unified ip phone 7965g · cisco/unified ip phone 7970g · cisco/unified ip phone 7971g-ge · cisco/unified ip phone 7975g · cisco/skinny client control protocol software
- Source
- psirt@cisco.com
References
- http://osvdb.org/72719
- http://secunia.com/advisories/44814/
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtmlVendor Advisory
- http://www.securityfocus.com/bid/48075
- http://www.securitytracker.com/id?1025588
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67743
- http://osvdb.org/72719
- http://secunia.com/advisories/44814/
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtmlVendor Advisory
- http://www.securityfocus.com/bid/48075
- http://www.securitytracker.com/id?1025588
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67743
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.