imPC@ndo IT

Tracker / CVE-2007-1062

CVE-2007-1062

High 10.0

The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time

Affected products and versions

cisco unified_ip_conference_station_7935_firmware · … → 3.2\(15\)
cisco unified_ip_conference_station_firmware_7936 · … → 3.3\(12\)

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References