unified ip phones 9900 series firmware vulnerabilities and exploits

(subscribe to this query)

7.1

CVSSv2

The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote malicious users to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.

Cisco Unified Ip Phones 9900 Series Firmware 9.3\\(2\\)

7.1

CVSSv2

Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote malicious users to cause a denial of service (device reboot) via crafted SDP packets, aka Bug ID CSCuf06698.

Cisco Unified Ip Phone 9971 Cisco Unified Ip Phone 9951

4.6

CVSSv2

Cisco Unified IP 9900 phones with firmware 9.4(.1) and previous versions allow local users to cause a denial of service (device reload) via crafted commands, aka Bug ID CSCup92790.

Cisco Unified Ip Phones 9971 Firmware Cisco Unified Ip Phones 9951 Firmware

5

CVSSv2

Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote malicious users to cause a denial of service (webapp interface outage) via long values in unspecified fields, aka Bug ID CSCuh10343.

Cisco Unified Ip Phones 9900 Series Firmware -Cisco Unified Ip Phone 9951 Cisco Unified Ip Phone 9971

6

CVSSv2

The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.

Cisco Unified Ip Phones 9900 Series Firmware -Cisco Unified Ip Phone 9971 Cisco Unified Ip Phone 9951

4.6

CVSSv2

Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.

Cisco Unified Ip Phone 9900 Cisco Unified Ip Phone Firmware 9.1 Cisco Unified Ip Phone Firmware 9.2

6.6

CVSSv2

The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.

Cisco Unified Ip Phone Firmware -Cisco Unified Ip Phone 8961 Cisco Unified Ip Phone 9971 Cisco Unified Ip Phone 9951

5.4

CVSSv2

Cisco 9900 Unified IP phones allow remote malicious users to cause a denial of service (unregistration) via a crafted SIP header, aka Bug ID CSCul24898.

Cisco Unified Ip Phones 9900 Series Firmware -Cisco Unified Ip Phone 9971 Cisco Unified Ip Phone 9951

5

CVSSv2

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and previous versions allows remote malicious users to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117.

Cisco Unified Ip Phones 9900 Series Firmware

4.6

CVSSv2

Cisco Unified IP 9900 phones with firmware 9.4(.1) and previous versions use weak permissions for unspecified files, which allows local users to cause a denial of service (persistent hang or reboot) by writing to a phone's filesystem, aka Bug ID CSCup90474.

Cisco Unified Ip Phones 9900 Series Firmware

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook