Information disclosure in Cisco Unified Ip Phone 9951

CVE-2015-0602

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117.

Vulnerability class: Information Disclosure

EPSS: 0.014 (69.1th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_ip_phone_9951
Cisco Unified_ip_phone_9971
Cisco Unified_ip_phones_9900_series_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (vdb-entry, x_refsource_XF)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)