CVE-2013-6685

The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.

Score

CVSS 2.0 6.6 Medium

Status

Modified - psirt@cisco.com

Published

2013-11-13

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Unified Ip Phone 8961 (Cisco)
• Unified Ip Phone 9951 (Cisco)
• Unified Ip Phone 9971 (Cisco)
• Unified Ip Phone Firmware (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6685