VulnerabilityModified
CVE-2015-0603
Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service (persistent hang or reboot) by writing to a phone's filesystem, aka Bug ID CSCup90474.
MEDIUM 4.6EPSS 0.30%
Does this matter?
Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service (persistent hang or reboot) by writing to a phone's filesystem, aka Bug ID CSCup90474.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:S/C:N/I:N/A:C
- EPSS
- 0.30% probability · 23th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- cisco/unified ip phones 9900 series firmware
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0603Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37345Vendor Advisory
- http://www.securityfocus.com/bid/72484
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100619
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0603Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37345Vendor Advisory
- http://www.securityfocus.com/bid/72484
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100619
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.