Vulnerability in Cisco Skinny Client Control Protocol Software
CVE-2011-1602
The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426.
EPSS: 0.003 (18.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Skinny_client_control_protocol_software — versions 1.0\(1\), 1.0\(2\), 1.0\(3\)
- Cisco Unified_ip_phone_7906
- Cisco Unified_ip_phone_7911g
- Cisco Unified_ip_phone_7931g
- Cisco Unified_ip_phone_7941g
- Cisco Unified_ip_phone_7941g-ge
- Cisco Unified_ip_phone_7942g
- Cisco Unified_ip_phone_7945g
- Cisco Unified_ip_phone_7961g
- Cisco Unified_ip_phone_7961g-ge
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (x_refsource_OSVDB, vdb-entry)