Vulnerability in Cisco Unified Ip Phone 7906g
CVE-2007-1063
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device.
EPSS: 0.033 (87.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_ip_phone_7906g
- Cisco Unified_ip_phone_7911g
- Cisco Unified_ip_phone_7941g
- Cisco Unified_ip_phone_7961g
- Cisco Unified_ip_phone_7970g
- Cisco Unified_ip_phone_7971g
- Cisco Unified_ip_phone_firmware_7906g — versions 8.0\(4\)
- Cisco Unified_ip_phone_firmware_7911g — versions 8.0\(4\)
- Cisco Unified_ip_phone_firmware_7941g — versions 8.0\(4\)
- Cisco Unified_ip_phone_firmware_7961g — versions 8.0\(4\)
Weakness classification (CWE)
References
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)