Lucene search
CiscoCISCO-SA-20140219-PHONEHistoryFeb 19, 2014 - 4:00 p.m.
Unauthorized Access Vulnerability in Cisco Unified SIP Phone 3905
2014-02-1916:00:00
tools.cisco.com
20
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.004 Low
EPSS
Percentile
73.6%
A vulnerability in the Cisco Unified SIP Phone 3905 could allow an unauthenticated, remote attacker to gain root-level access to an affected device.
Cisco has released software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available.
This advisory is available at the following link:
Affected configurations
Node
ciscounified_sip_phone_3900_firmwareMatchany
ORciscounified_sip_phone_3905Match3900_series_firmware
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco unified sip phone 3900 series firmware | eq | any | |
| cisco unified sip phone | eq | 3900 Series Firmware |
Related
nvd
nvd
CVE-2014-0721
2014-02-22 21:55:09
cve
cve
CVE-2014-0721
2014-02-22 21:55:09
prion
prion
Design/Logic Flaw
2014-02-22 21:55:00
nessus
nessus
Cisco Unified SIP Phone 3905 Permissions, Privileges, and Access Controls (CVE-2014-0721)
2024-03-18 00:00:00
Unified SIP Phone 3905 Unauthorized Access
2014-02-27 00:00:00
seebug
seebug
Cisco Unified SIP Phone 3905未授权访问漏洞
2014-02-21 00:00:00
cvelist
cvelist
CVE-2014-0721
2014-02-22 21:00:00
securityvulns
securityvulns
Cisco Unified SIP Phone 3905 unauthorized access
2014-03-20 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.004 Low
EPSS
Percentile
73.6%
Related for CISCO-SA-20140219-PHONE