Lucene search

[email protected]NVD:CVE-2011-1637

HistoryJun 02, 2011 - 8:55 p.m.

CVE-2011-1637

2011-06-0220:55:03

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

1.5

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.

Affected configurations

Nvd

Node

ciscounified_ip_phone_7906

ciscounified_ip_phone_7911g

ciscounified_ip_phone_7931g

ciscounified_ip_phone_7941g

ciscounified_ip_phone_7941g-ge

ciscounified_ip_phone_7942g

ciscounified_ip_phone_7945g

ciscounified_ip_phone_7961g

ciscounified_ip_phone_7961g-ge

ciscounified_ip_phone_7962g

ciscounified_ip_phone_7965g

ciscounified_ip_phone_7970g

ciscounified_ip_phone_7971g-ge

ciscounified_ip_phone_7975g

AND

ciscoskinny_client_control_protocol_softwareRange≤9.1\(1\)sr1

ciscoskinny_client_control_protocol_softwareMatch1.0\(1\)

ciscoskinny_client_control_protocol_softwareMatch1.0\(2\)

ciscoskinny_client_control_protocol_softwareMatch1.0\(2\)sr1

ciscoskinny_client_control_protocol_softwareMatch1.0\(3\)

ciscoskinny_client_control_protocol_softwareMatch1.0\(4\)

ciscoskinny_client_control_protocol_softwareMatch1.0\(5\)

ciscoskinny_client_control_protocol_softwareMatch1.0\(9\)

ciscoskinny_client_control_protocol_softwareMatch1.1\(1\)

ciscoskinny_client_control_protocol_softwareMatch1.2\(1\)

ciscoskinny_client_control_protocol_softwareMatch1.3\(1\)

ciscoskinny_client_control_protocol_softwareMatch1.3\(2\)

ciscoskinny_client_control_protocol_softwareMatch1.3\(3\)

ciscoskinny_client_control_protocol_softwareMatch1.3\(4\)

ciscoskinny_client_control_protocol_softwareMatch1.3\(4\)sr1

ciscoskinny_client_control_protocol_softwareMatch1.4\(1\)

ciscoskinny_client_control_protocol_softwareMatch1.4\(2\)

ciscoskinny_client_control_protocol_softwareMatch2.0\(0\)

ciscoskinny_client_control_protocol_softwareMatch2.0\(1\)

ciscoskinny_client_control_protocol_softwareMatch3.0

ciscoskinny_client_control_protocol_softwareMatch3.0\(0\)

ciscoskinny_client_control_protocol_softwareMatch3.0\(1\)

ciscoskinny_client_control_protocol_softwareMatch3.0\(2\)

ciscoskinny_client_control_protocol_softwareMatch3.1

ciscoskinny_client_control_protocol_softwareMatch3.1\(1\)

ciscoskinny_client_control_protocol_softwareMatch3.1\(2\)

ciscoskinny_client_control_protocol_softwareMatch3.1\(3\)

ciscoskinny_client_control_protocol_softwareMatch3.1\(4\)

ciscoskinny_client_control_protocol_softwareMatch3.1\(6\)

ciscoskinny_client_control_protocol_softwareMatch3.1\(10\)

ciscoskinny_client_control_protocol_softwareMatch3.1\(11\)

ciscoskinny_client_control_protocol_softwareMatch3.2

ciscoskinny_client_control_protocol_softwareMatch3.2\(1\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(2\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(3\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(4\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(5\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(6\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(6a\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(7\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(8\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(9\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(10\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(11\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(12\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(13\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(14\)

ciscoskinny_client_control_protocol_softwareMatch3.2\(15\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(2\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(3\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(4\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(5\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(6\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(7\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(8\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(9\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(10\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(11\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(12\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(13\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(14\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(15\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(16\)

ciscoskinny_client_control_protocol_softwareMatch3.3\(20\)

ciscoskinny_client_control_protocol_softwareMatch4.0\(0\)

ciscoskinny_client_control_protocol_softwareMatch4.1\(2\)

ciscoskinny_client_control_protocol_softwareMatch4.1\(3\)

ciscoskinny_client_control_protocol_softwareMatch4.1\(4\)

ciscoskinny_client_control_protocol_softwareMatch4.1\(5\)

ciscoskinny_client_control_protocol_softwareMatch4.1\(6\)

ciscoskinny_client_control_protocol_softwareMatch4.1\(7\)

ciscoskinny_client_control_protocol_softwareMatch5.0\(0\)

ciscoskinny_client_control_protocol_softwareMatch5.0\(1a\)

ciscoskinny_client_control_protocol_softwareMatch5.0\(3\)

ciscoskinny_client_control_protocol_softwareMatch5.0\(5\)

ciscoskinny_client_control_protocol_softwareMatch5.0\(6\)

ciscoskinny_client_control_protocol_softwareMatch5.0\(7\)

ciscoskinny_client_control_protocol_softwareMatch6.0\(0\)

ciscoskinny_client_control_protocol_softwareMatch6.0\(2\)sr2

ciscoskinny_client_control_protocol_softwareMatch6.0\(3\)

ciscoskinny_client_control_protocol_softwareMatch6.0\(3\)sr1

ciscoskinny_client_control_protocol_softwareMatch6.0\(4\)

ciscoskinny_client_control_protocol_softwareMatch6.0\(5\)

ciscoskinny_client_control_protocol_softwareMatch6.1\(0\)

ciscoskinny_client_control_protocol_softwareMatch6.1\(1\)

ciscoskinny_client_control_protocol_softwareMatch7.0\(1\)

ciscoskinny_client_control_protocol_softwareMatch7.0\(2\)

ciscoskinny_client_control_protocol_softwareMatch7.0\(2\)sr1

ciscoskinny_client_control_protocol_softwareMatch7.0\(3\)

ciscoskinny_client_control_protocol_softwareMatch7.1\(2\)

ciscoskinny_client_control_protocol_softwareMatch7.2\(2\)

ciscoskinny_client_control_protocol_softwareMatch7.2\(3\)

ciscoskinny_client_control_protocol_softwareMatch7.2\(4\)

ciscoskinny_client_control_protocol_softwareMatch8.0\(1\)

ciscoskinny_client_control_protocol_softwareMatch8.0\(2\)

ciscoskinny_client_control_protocol_softwareMatch8.0\(3\)

ciscoskinny_client_control_protocol_softwareMatch8.0\(4\)

ciscoskinny_client_control_protocol_softwareMatch8.0\(4\)sr1

ciscoskinny_client_control_protocol_softwareMatch8.0\(4\)sr3a

ciscoskinny_client_control_protocol_softwareMatch8.0\(5\)

ciscoskinny_client_control_protocol_softwareMatch8.0\(6\)

ciscoskinny_client_control_protocol_softwareMatch8.0\(7\)

ciscoskinny_client_control_protocol_softwareMatch8.0\(8\)

ciscoskinny_client_control_protocol_softwareMatch8.0\(9\)

ciscoskinny_client_control_protocol_softwareMatch8.0\(10\)

ciscoskinny_client_control_protocol_softwareMatch8.1\(1\)

ciscoskinny_client_control_protocol_softwareMatch8.1\(2\)

ciscoskinny_client_control_protocol_softwareMatch8.2\(1\)

ciscoskinny_client_control_protocol_softwareMatch8.2\(2\)sr1

ciscoskinny_client_control_protocol_softwareMatch8.2\(2\)sr2

ciscoskinny_client_control_protocol_softwareMatch8.2\(2\)sr3

ciscoskinny_client_control_protocol_softwareMatch8.2\(2\)sr4

ciscoskinny_client_control_protocol_softwareMatch8.3\(1\)

ciscoskinny_client_control_protocol_softwareMatch8.3\(2\)

ciscoskinny_client_control_protocol_softwareMatch8.3\(2\)sr1

ciscoskinny_client_control_protocol_softwareMatch8.3\(3\)

ciscoskinny_client_control_protocol_softwareMatch8.3\(3\)sr1

ciscoskinny_client_control_protocol_softwareMatch8.3\(3\)sr2

ciscoskinny_client_control_protocol_softwareMatch8.3\(5\)

ciscoskinny_client_control_protocol_softwareMatch8.4\(1\)

ciscoskinny_client_control_protocol_softwareMatch8.4\(1\)sr2

ciscoskinny_client_control_protocol_softwareMatch8.4\(2\)

ciscoskinny_client_control_protocol_softwareMatch8.4\(3\)

ciscoskinny_client_control_protocol_softwareMatch8.4\(4\)

ciscoskinny_client_control_protocol_softwareMatch8.5\(2\)

ciscoskinny_client_control_protocol_softwareMatch8.5\(2\)sr1

ciscoskinny_client_control_protocol_softwareMatch8.5\(3\)

ciscoskinny_client_control_protocol_softwareMatch8.5\(3\)sr1

ciscoskinny_client_control_protocol_softwareMatch8.5\(4\)

ciscoskinny_client_control_protocol_softwareMatch8.70

ciscoskinny_client_control_protocol_softwareMatch9.0\(2\)sr1

ciscoskinny_client_control_protocol_softwareMatch9.0\(2\)sr2

ciscoskinny_client_control_protocol_softwareMatch9.0\(3\)

VendorProductVersionCPE
ciscounified_ip_phone_7906*cpe:2.3:h:cisco:unified_ip_phone_7906:*:*:*:*:*:*:*:*
ciscounified_ip_phone_7911g*cpe:2.3:h:cisco:unified_ip_phone_7911g:*:*:*:*:*:*:*:*
ciscounified_ip_phone_7931g*cpe:2.3:h:cisco:unified_ip_phone_7931g:*:*:*:*:*:*:*:*
ciscounified_ip_phone_7941g*cpe:2.3:h:cisco:unified_ip_phone_7941g:*:*:*:*:*:*:*:*
ciscounified_ip_phone_7941g-ge*cpe:2.3:h:cisco:unified_ip_phone_7941g-ge:*:*:*:*:*:*:*:*
ciscounified_ip_phone_7942g*cpe:2.3:h:cisco:unified_ip_phone_7942g:*:*:*:*:*:*:*:*
ciscounified_ip_phone_7945g*cpe:2.3:h:cisco:unified_ip_phone_7945g:*:*:*:*:*:*:*:*
ciscounified_ip_phone_7961g*cpe:2.3:h:cisco:unified_ip_phone_7961g:*:*:*:*:*:*:*:*
ciscounified_ip_phone_7961g-ge*cpe:2.3:h:cisco:unified_ip_phone_7961g-ge:*:*:*:*:*:*:*:*
ciscounified_ip_phone_7962g*cpe:2.3:h:cisco:unified_ip_phone_7962g:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_ip_phone_7906	*	cpe:2.3:h:cisco:unified_ip_phone_7906::::::::
cisco	unified_ip_phone_7911g	*	cpe:2.3:h:cisco:unified_ip_phone_7911g::::::::
cisco	unified_ip_phone_7931g	*	cpe:2.3:h:cisco:unified_ip_phone_7931g::::::::
cisco	unified_ip_phone_7941g	*	cpe:2.3:h:cisco:unified_ip_phone_7941g::::::::
cisco	unified_ip_phone_7941g-ge	*	cpe:2.3:h:cisco:unified_ip_phone_7941g-ge::::::::
cisco	unified_ip_phone_7942g	*	cpe:2.3:h:cisco:unified_ip_phone_7942g::::::::
cisco	unified_ip_phone_7945g	*	cpe:2.3:h:cisco:unified_ip_phone_7945g::::::::
cisco	unified_ip_phone_7961g	*	cpe:2.3:h:cisco:unified_ip_phone_7961g::::::::
cisco	unified_ip_phone_7961g-ge	*	cpe:2.3:h:cisco:unified_ip_phone_7961g-ge::::::::
cisco	unified_ip_phone_7962g	*	cpe:2.3:h:cisco:unified_ip_phone_7962g::::::::