677 matches found
JVN#07677464: 050 plus for Android information management vulnerability
050 plus provided by NTT Communications is an IP phone application for smartphones. 050 plus for Android contains an information management vulnerability that outputs some pieces of information stored by the product to a system log file on the device. Impact Android applications with permissions ...
Unified SIP Phone 3905 Unauthorized Access
According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device has an undocumented test interface TCP service that could be accessed on port 7870. This service could allow unauthorized users to obtain remote root access on the device. C...
Cisco Unified IP Phone 7960G CTL信任链执行安全绕过漏洞
Bugtraq ID:65705 CVE ID:CVE-2014-0737 Cisco Unified IP Phone是思科的统一IP电话解决方案。 Cisco Unified IP Phone 7960G的CTL验证存在漏洞，允许未验证远程攻击者向IP电话注入CTL文件。由于不充分验证CTL文件，攻击者可向电话机中注入恶意CTL文件爱你，可使电话信任攻击者控制的系统。 0 Cisco Unified IP Phone 7960G 目前没有详细解决方案提供： http://www.cisco.com...
Cisco 9900 Series IP Phone Crafted Header Unregister Vulnerability
According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device does not properly process SIP headers. By sending a specially crafted SIP header to the device, a remote attacker may be able to cause the phone to unregister, resulting in a...
Avaya to Patch one-X IP phone zero-day vulnerability
SAN FRANCISCO — Two zero-day vulnerabilities in Avaya’s latest one-X 9608 IP telephones have been discovered and are expected to be patched on Friday by the provider. Researcher Ang Cui, a Ph.D. candidate at Columbia University and chief scientist at Red Balloon Security, will demonstrate an...
CVE-2014-0737
The Cisco Unified IP Phone 7960G 9.21 and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List CTL file, aka Bug ID CSCuj66795...
CVE-2014-0737
The Cisco Unified IP Phone 7960G 9.21 and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List CTL file, aka Bug ID CSCuj66795...
CVE-2014-0737
Cisco CVE-2014-0737 affects the Cisco Unified IP Phone 7960G (9.2(1) and earlier). The root issue is insufficient CTL (Certificate Trust List) validation, allowing remote attackers to bypass authentication and inject a crafted CTL file to change trust relationships, enabling control over trusted ...
Cisco Adaptive Security Appliance Phone Proxy CTL Authentication Vulnerability
A vulnerability in the Phone Proxy function of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to modify the trust of the Certificate Trust List CTL of a remote IP phone. The vulnerability is due to insufficient authentication of the CTL file. An attacker...
Cisco Third-Generation IP Phone CTL Trust Chain Enforcement Vulnerability
A vulnerability in Certificate Trust List CTL authentication of Cisco third-generation IP phones could allow an unauthenticated, remote attacker to inject a crafted CTL file to the IP phone. The vulnerability is due to insufficient authentication of the CTL file. An attacker could exploit this...
Cisco 9900 Series IP Phone Crafted Header Unregister Vulnerability
A vulnerability in Session Initiation Protocol SIP header processing of Cisco fourth-generation IP phones could allow an unauthenticated, remote attacker to cause the IP phone to unregister. The vulnerability is due to improper SIP header processing. An attacker could exploit this vulnerability b...
Code injection
Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service unregistration via a crafted SIP header, aka Bug ID CSCul24898...
Cisco Unified IP Phone 8900/9900 Series Insecure File Permissions Vulnerability
A vulnerability in Cisco Unified IP Phone 9951, Cisco Unified IP Phone 9971, and Cisco Unified IP Phone 8961 could allow an authenticated, local attacker to fully compromise the affected device. The vulnerability is due to insecure file permissions on memory block devices. An attacker could explo...
CVE-2013-6685
The CVE-2013-6685 issue affects Cisco Unified IP Phone models 8961, 9951, and 9971. Root cause: weak permissions on memory block devices, enabling a local attacker to gain privileges by mounting a device that contains a setuid file in its filesystem. Impact: local privilege elevation on affected ...
Cisco Unified IP Phone 8900/9900 Series Crafted SDP Packet Vulnerability
A vulnerability in the SDP negotiation logic of the Cisco Cisco Unified IP Phone 9951, Cisco Unified IP Phone 9971 and the Cisco Unified IP Phone 8961 could allow an unauthenticated, remote attacker to cause the phone to reboot. The vulnerability is due to improper processing of crafted SDP...
Cisco Unified IP Phones Privilege Escalation (cisco-sa-20130109-uipphone)
According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device has a local privilege escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges. Successful exploits could result in the complete compromise o...
CVE-2013-3468
The Cisco Unified IP Phone 8945 with software 9.32 allows remote attackers to cause a denial of service device hang via a malformed PNG file, aka Bug ID CSCud04270...
Code injection
The Cisco Unified IP Phone 8945 with software 9.32 allows remote attackers to cause a denial of service device hang via a malformed PNG file, aka Bug ID CSCud04270...
CVE-2013-3468
Cisco Unified IP Phone 8945 (software 9.3(2)) is affected by CVE-2013-3468 due to incorrect processing of malformed PNG images, which can remotely trigger a device hang/lockup (denial of service). Evidence from Cisco advisory Cisco-SA-20130828-CVE-2013-3468 and multiple third-party sources confir...