Lucene search

K
cve[email protected]CVE-2014-0737
HistoryFeb 22, 2014 - 9:55 p.m.

CVE-2014-0737

2014-02-2221:55:09
CWE-287
web.nvd.nist.gov
23
cisco
unified ip phone
7960g
authentication bypass
trust relationship
remote attack
security vulnerability
cve-2014-0737
nvd

7.1 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

49.1%

The Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj66795.

Affected configurations

NVD
Node
ciscounified_ip_phone_7960g

7.1 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

49.1%