IT

Tracker / CVE-2011-1637

CVE-2011-1637

Low 1.5

Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.

Affected products and versions

cisco skinny_client_control_protocol_software
cisco skinny_client_control_protocol_software · … → 9.1\(1\)
cisco unified_ip_phone_7906
cisco unified_ip_phone_7911g
cisco unified_ip_phone_7931g
cisco unified_ip_phone_7941g
cisco unified_ip_phone_7941g-ge
cisco unified_ip_phone_7942g
cisco unified_ip_phone_7945g
cisco unified_ip_phone_7961g
cisco unified_ip_phone_7961g-ge
cisco unified_ip_phone_7962g
cisco unified_ip_phone_7965g
cisco unified_ip_phone_7970g
cisco unified_ip_phone_7971g-ge
cisco unified_ip_phone_7975g

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References