Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified ip phone 9971 vulnerabilities and exploits

(subscribe to this query)
357
VMScore
CVE-2022-20817
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote malicious user to impersonate another user's phone if the Cisco Unified Communications Manager (CUCM) is in secure mode. This vulnerability is due to improper key generation during the manufact...
Cisco Unified Ip Phone 6911 Firmware -Cisco Unified Ip Phone 6921 Firmware -Cisco Unified Ip Phone 6941 Firmware -Cisco Unified Ip Phone 6945 Firmware -Cisco Unified Ip Phone 6961 Firmware -Cisco Unified Ip Phone 8941 Firmware -Cisco Unified Ip Phone 8945 Firmware -Cisco Unified Ip Phone 8961 Firmware -Cisco Unified Ip Phone 9951 Firmware -Cisco Unified Ip Phone 9971 Firmware -Cisco Ata 187 Analog Telephone Adapter Firmware
632
VMScore
CVE-2013-5526
Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote malicious users to cause a denial of service (device reboot) via crafted SDP packets, aka Bug ID CSCuf06698.
Cisco Unified Ip Phone 9971Cisco Unified Ip Phone 9951
587
VMScore
CVE-2013-6685
The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.
Cisco Unified Ip Phone Firmware -Cisco Unified Ip Phone 8961Cisco Unified Ip Phone 9971Cisco Unified Ip Phone 9951
384
VMScore
CVE-2020-25685
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is c...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
740
VMScore
CVE-2020-25681
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buff...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
740
VMScore
CVE-2020-25682
A flaw was found in dnsmasq prior to 2.83. A buffer overflow vulnerability exists in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflow with...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
633
VMScore
CVE-2020-25683
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocat...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
384
VMScore
CVE-2020-25684
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the ex...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0Arista Eos
384
VMScore
CVE-2020-25686
A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
632
VMScore
CVE-2020-25687
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook