Cisco Unified Ip Phone 9971
14 CVEs affecting Cisco Unified Ip Phone 9971. Latest disclosed: 2022-06-15. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0332 | High | 7.5 | 2018-06-07 | A vulnerability in the Session Initiation Protocol (SIP) ingress packet processing of Cisco Unified IP Phone software could allow an unauthenticated, remote at… |
CVE-2022-20817 | High | 7.4 | 2022-06-15 | A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communicati… |
CVE-2020-3360 | Medium | 5.3 | 2020-06-18 | A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote attacker to view sensitive info… |
CVE-2015-0602 | | 2015-02-07 | The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive information by sniffing th… | |
CVE-2015-0600 | | 2015-02-07 | The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to cause a denial of service (logoff) via craf… | |
CVE-2015-0604 | | 2015-02-07 | The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's… | |
CVE-2015-0603 | | 2015-02-07 | Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause a denial of servic… | |
CVE-2015-0601 | | 2015-02-07 | Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause a denial of service (device reload) via crafted commands, aka Bug ID… | |
CVE-2014-0658 | | 2014-01-10 | Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP header, aka Bug ID CSCul24898. | |
CVE-2013-6685 | | 2013-11-13 | The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mou… | |
CVE-2013-5533 | | 2013-10-11 | The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, ak… | |
CVE-2013-5532 | | 2013-10-11 | Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service (webapp interface outage) via lon… | |
CVE-2013-5526 | | 2013-10-10 | Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service (device reboot) via… | |
CVE-2013-3426 | | 2013-07-18 | The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a path… |