VulnerabilityModified
CVE-2015-0602
The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117.
MEDIUM 5.0EPSS 1.37%
Does this matter?
Lower severity and a low EPSS score (1.37%). Track it; it rarely justifies an emergency change on its own.
Description
The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.37% probability · 70th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- cisco/unified ip phones 9900 series firmware
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0602Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37342Vendor Advisory
- http://www.securityfocus.com/bid/72482
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100615
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0602Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37342Vendor Advisory
- http://www.securityfocus.com/bid/72482
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100615
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.