Lucene search
HistoryMay 03, 2012 - 11:55 p.m.
CVE-2012-1328
cisco
ip phones
9900 series
firmware
privilege escalation
injected data
cve-2012-1328
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.
Affected configurations
Node
ciscounified_ip_phoneMatch9900
ORciscounified_ip_phone_firmwareMatch9.1
ORciscounified_ip_phone_firmwareMatch9.2
Related
cvelist
cvelist
CVE-2012-1328
2012-05-03 23:00:00
nessus
nessus
Cisco Unified IP Phones 9900 Code Injection (CVE-2012-1328)
2024-03-18 00:00:00
nvd
nvd
CVE-2012-1328
2012-05-03 23:55:01
prion
prion
Command injection
2012-05-03 23:55:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2012-1328