215 matches found
CVE-2015-0600
The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to cause a denial of service logoff via crafted packets, aka Bug ID CSCuq12139...
CVE-2015-0602
The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117...
CVE-2015-0604
The web framework on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424...
CVE-2015-0603
Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service persistent hang or reboot by writing to a phone's filesystem, aka Bug ID CSCup90474...
Command injection
The web framework on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424...
Code injection
Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allow local users to cause a denial of service device reload via crafted commands, aka Bug ID CSCup92790...
CVE-2015-0601
Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allow local users to cause a denial of service device reload via crafted commands, aka Bug ID CSCup92790...
CVE-2015-0604
The web framework on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424...
CVE-2015-0604
Cisco Unified IP Phone 9900 Series (firmware 9.4(.1) and earlier) is affected by CVE-2015-0604 due to a vulnerable web framework that fails to validate HTTP requests, enabling remote attackers to upload files to arbitrary locations on the phone’s filesystem via crafted requests (Bug ID CSCup90424...
CVE-2015-0603
Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service persistent hang or reboot by writing to a phone's filesystem, aka Bug ID CSCup90474...
CVE-2015-0603
Cisco Unified IP Phone 9900 Series (firmware 9.4(.1) and earlier) expose weak file permissions on certain files, enabling a local authenticated attacker to cause a DoS (hang or reboot) by writing to the device filesystem. Root cause: insecure permissions. Impact: DoS on affected devices. Mitigati...
Cisco Unified IP Phones 9900 Series Denial of Service Vulnerability (CNVD-2015-00923)
Cisco Unified IP Phone 9900 is a 9900 series IP phone terminal equipment from Cisco USA. The device provides voice, video, and other features. A security vulnerability exists in the mobility extension of the Cisco Unified IP Phone 9900 Series. A remote attacker could exploit this vulnerability to...
Cisco Unified IP Phones 9900 Series Local Denial of Service Vulnerability (CNVD-2015-00920)
Cisco Unified IP Phone 9900 is a 9900 series IP phone terminal equipment from Cisco USA. The device provides voice, video, and other features. A security vulnerability exists in the Cisco Unified IP Phone 9900 Series. A local attacker could exploit this vulnerability to cause a denial of service...
Cisco Unified IP Phones 9900 Series Local Denial of Service Vulnerability (CNVD-2015-00921)
Cisco Unified IP Phone 9900 is a 9900 series IP phone terminal equipment from Cisco USA. The device provides voice, video, and other features. A local denial of service vulnerability exists in the Cisco Unified IP Phones 9900 Series, which can be exploited by a local attacker to reload the affect...
Cisco Unified IP Phone 9900 Series Insecure Device Permissions Vulnerability
A vulnerability in the Cisco Unified IP Phone 9900 Series could allow an authenticated, local attacker to cause a complete denial of service DoS on an affected device. The vulnerability is due to insecure file permissions on some devices. An attacker could exploit this vulnerability by writing to...
Cisco 9900 Series IP Phone Crafted Header Unregister Vulnerability
According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device does not properly process SIP headers. By sending a specially crafted SIP header to the device, a remote attacker may be able to cause the phone to unregister, resulting in a...
Code injection
Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service unregistration via a crafted SIP header, aka Bug ID CSCul24898...
CVE-2014-0658
CVE-2014-0658 affects Cisco 9900 Series Unified IP Phones . The issue arises in SIP header processing, where a crafted SIP header can cause the device to unregister, producing a denial-of-service condition. Public sources consistently identify the vulnerability as CSCul24898. Exploitation details...
Buffer overflow
Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service webapp interface outage via long values in unspecified fields, aka Bug ID CSCuh10343...