CVE-2011-1637

Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.

Score

CVSS 2.0 1.5 Low

Status

Modified - psirt@cisco.com

Published

2011-06-02

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Skinny Client Control Protocol Software (Cisco)
• Unified Ip Phone 7906 (Cisco)
• Unified Ip Phone 7911g (Cisco)
• Unified Ip Phone 7931g (Cisco)
• Unified Ip Phone 7941g (Cisco)
• Unified Ip Phone 7941g-ge (Cisco)
• Unified Ip Phone 7942g (Cisco)
• Unified Ip Phone 7945g (Cisco)
• Unified Ip Phone 7961g (Cisco)
• Unified Ip Phone 7961g-ge (Cisco)
• Unified Ip Phone 7962g (Cisco)
• Unified Ip Phone 7965g (Cisco)
• Unified Ip Phone 7970g (Cisco)
• Unified Ip Phone 7971g-ge (Cisco)
• Unified Ip Phone 7975g (Cisco)

References

• http://osvdb.org/72719
• http://secunia.com/advisories/44814/
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtml
• http://www.securityfocus.com/bid/48075
• http://www.securitytracker.com/id?1025588
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67743