Vulnerability in Cisco Skinny Client Control Protocol Software
CVE-2011-1637
Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.
EPSS: 0.003 (19.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Skinny_client_control_protocol_software — versions 1.0\(1\), 1.0\(2\), 1.0\(3\)
- Cisco Unified_ip_phone_7906
- Cisco Unified_ip_phone_7911g
- Cisco Unified_ip_phone_7931g
- Cisco Unified_ip_phone_7941g
- Cisco Unified_ip_phone_7941g-ge
- Cisco Unified_ip_phone_7942g
- Cisco Unified_ip_phone_7945g
- Cisco Unified_ip_phone_7961g
- Cisco Unified_ip_phone_7961g-ge
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_OSVDB, vdb-entry)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)