Auth bypass in Cisco Unified Ip Phone 7960g

CVE-2014-0737

The Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj66795.

Vulnerability class: Broken Authentication

EPSS: 0.007 (49.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_ip_phone_7960g
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (x_refsource_CONFIRM)