EUVD-2013-5372

Malware in sbrugna...

EUVD-2015-4249

Malware in sbrugna...

EUVD-2014-0689

Malware in sbrugna...

EUVD-2013-5373

Malware in sbrugna...

EUVD-2013-5366

Malware in sbrugna...

CVE-2013-3426

The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810...

CVE-2013-5533

The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334...

CVE-2013-5532

Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service webapp interface outage via long values in unspecified fields, aka Bug ID CSCuh10343...

Cisco 9900 Series IP Phones Denial of Service Vulnerability

Cisco 9900 Series IP Phones is a 9900 series IP phone product from Cisco USA. This product provides voice and video features. A denial of service vulnerability exists in the Cisco 9900 Series IP Phones, which stems from the program's failure to properly support the RTP protocol. A remote attacker...

CVE-2015-4226: Undefined Security Weakness

The packet-storing feature on Cisco 9900 phones with firmware 9.32 does not properly support the RTP protocol, which allows remote attackers to cause a denial of service device hang by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976...

PT-2015-6470

Name of the Vulnerable Software and Affected Versions Cisco 9900 phones version 9.32 Description The issue is related to the packet-storing feature on Cisco 9900 phones, which does not properly support the RTP protocol. This allows remote attackers to cause a denial of service, resulting in a...

Cisco 9900 Series IP Phone Crafted Header Unregister Vulnerability

According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device does not properly process SIP headers. By sending a specially crafted SIP header to the device, a remote attacker may be able to cause the phone to unregister, resulting in a...

Code injection

Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service unregistration via a crafted SIP header, aka Bug ID CSCul24898...

PT-2014-3753

Name of the Vulnerable Software and Affected Versions Cisco 9900 Unified IP phones affected versions not specified Description The issue allows remote attackers to cause a denial of service, specifically unregistration, by sending a crafted SIP header. Recommendations At the moment, there is no...

CVE-2014-0658: Improper Input Validation

Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service unregistration via a crafted SIP header, aka Bug ID CSCul24898...

Buffer overflow

Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service webapp interface outage via long values in unspecified fields, aka Bug ID CSCuh10343...

Design/Logic Flaw

The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334...

CVE-2013-5533: Improper Input Validation

The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334...

PT-2013-5614

Name of the Vulnerable Software and Affected Versions Cisco 9900 Unified IP phones affected versions not specified Description The issue concerns the image-upgrade functionality, which allows local users to gain privileges. This is achieved by placing shell commands in an unspecified parameter...

PT-2013-5613

Name of the Vulnerable Software and Affected Versions Cisco 9900 IP phones affected versions not specified Description A buffer overflow issue exists in the web-application interface, allowing remote attackers to cause a denial of service, resulting in a webapp interface outage. This can be...