Lucene search

K
cveCiscoCVE-2015-0601
HistoryFeb 07, 2015 - 4:59 a.m.

CVE-2015-0601

2015-02-0704:59:05
CWE-20
cisco
web.nvd.nist.gov
24
cisco
ip phones
firmware
vulnerability
denial of service
nvd
cve-2015-0601
cscup92790

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0

Percentile

5.1%

Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause a denial of service (device reload) via crafted commands, aka Bug ID CSCup92790.

Affected configurations

Nvd
Node
ciscounified_ip_phones_9971_firmwareRange9.4\(.1\)
AND
ciscounified_ip_phone_9971
Node
ciscounified_ip_phones_9951_firmwareRange9.4\(.1\)
AND
ciscounified_ip_phone_9951
VendorProductVersionCPE
ciscounified_ip_phones_9971_firmware*cpe:2.3:o:cisco:unified_ip_phones_9971_firmware:*:*:*:*:*:*:*:*
ciscounified_ip_phone_9971*cpe:2.3:h:cisco:unified_ip_phone_9971:*:*:*:*:*:*:*:*
ciscounified_ip_phones_9951_firmware*cpe:2.3:o:cisco:unified_ip_phones_9951_firmware:*:*:*:*:*:*:*:*
ciscounified_ip_phone_9951*cpe:2.3:h:cisco:unified_ip_phone_9951:*:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2015-0601