31 matches found
EUVD-2018-7312
Malware in sbrugna...
EUVD-2008-4425
Malware in sbrugna...
EUVD-2008-0538
Malware in sbrugna...
EUVD-2012-5364
Malware in sbrugna...
EUVD-2008-0536
Malware in sbrugna...
EUVD-2008-0537
Malware in sbrugna...
Cisco Unified IP Phone Permissions, Privileges, and Access Controls (CVE-2007-1072)
The command line interface CLI in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063. This...
Cisco Unified IP Phone Use of Hard-coded Credentials (CVE-2007-1063)
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard- coded username and password, which allows remote attackers to access the device. This plugin only works with Tenable.ot. Please visit...
Cisco Unified IP Phone Exposure of Sensitive Information to an Unauthorized Actor (CVE-2007-6190)
The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an...
Cisco Unified IP Phone 7900 Improper Input Validation (CVE-2012-5445)
The kernel in Cisco Native Unix CNU on Cisco Unified IP Phone 7900 series devices aka TNP phones with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service memory overwrite via a crafted binary...
Cisco Unified IP Phone 8945 Crafted PNG Image Lockup (CVE-2013-3468)
The Cisco Unified IP Phone 8945 with software 9.32 allows remote attackers to cause a denial of service device hang via a malformed PNG file, aka Bug ID CSCud04270. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...
Cisco Unified IP Phone 9900 Series Arbitrary File Upload (CVE-2015-0604)
The web framework on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424. This plugin only works with Tenable.ot. Please visit...
Cisco Unified IP Phone 8900/9900 Series Insecure File Permissions (CVE-2013-6685)
The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382. This plugin only works with Tenable.ot. Please visit...
CVE-2018-0332
A vulnerability in the Session Initiation Protocol SIP ingress packet processing of Cisco Unified IP Phone software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a lack of flow-control mechanisms in the software. An attacke...
Cisco Unified IP Phone Software Denial of Service Vulnerability
The Cisco Unified IP Phone is a Unified Interconnection Protocol phone. A denial of service vulnerability exists in the handling of Session Initiation Protocol SIP inbound packets in the software of the Cisco Unified IP Phone. The vulnerability stems from the software's lack of a flow control...
Cisco Unified IP Phone 7900 su实用工具权限提升漏洞
No description provided by source...
Cisco Unified IP Phone Detection
The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Cisco Unified IP Phone 9900 Series Arbitrary File Upload Vulnerability
A vulnerability in the web framework of Cisco Unified IP Phone 9900 Series could allow an unauthenticated, remote attacker to upload arbitrary files to the phone. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafte...
Unified SIP Phone 3905 Unauthorized Access
According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device has an undocumented test interface TCP service that could be accessed on port 7870. This service could allow unauthorized users to obtain remote root access on the device. C...
Cisco Unified IP Phones Privilege Escalation (cisco-sa-20130109-uipphone)
According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device has a local privilege escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges. Successful exploits could result in the complete compromise o...