5
CVSSv2

CVE-2015-0602

Published: 07/02/2015 Updated: 08/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and previous versions allows remote malicious users to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco unified_ip_phones_9900_series_firmware

Vendor Advisories

A vulnerability in the mobility extension feature of Cisco Unified IP Phone 9900 Series could allow an unauthenticated, remote attacker to obtain sensitive information The vulnerability is due to insufficient protections of information in transit An attacker could exploit this vulnerability by monitoring network traffic Cisco has confirmed the ...