CVE-2016-1421

A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails t...

CVE-2016-1421

A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails t...

Out-of-bounds

A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails t...

CVE-2016-1421

Cisco IP Phones Web Application Buffer Overflow (CVE-2016-1421) affects Cisco IP Phone web servers. The issue stems from improper bounds checking in the HTTP request handling, enabling an unauthenticated, remote attacker to abuse a crafted request to execute code with root privileges or trigger a...

CVE-2016-1421

A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails t...

Cisco IP Phones Web Application Buffer Overflow Vulnerability

A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails t...

Cisco Unified IP phones 内存块设备弱权限漏洞

No description provided by source...

CVE-2016-1403

CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005...

Telisca IPS Lock 2 Remote Phone Lock

a vulnerability in IPS LOCK , below is the description : Exploit Title: TELISCA IPS LOCK ABUSE Date: 13/01/2016 Software Link: http://www.telisca.com/products/ip-phone-apps/ipslock/ Exploit Author: Fakhir Karim Reda Contact: [email protected] Metasploit module :...

CVE-2015-8231

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service device restart via unspecified packets...

CVE-2015-8230

Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service memory consumption and restart via a large number of crafted ARP packets...

Code injection

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service device restart via unspecified packets...

CVE-2015-8231

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service device restart via unspecified packets...

CVE-2015-8231

Huawei eSpace 7910/7950 IP phones running pre-V200R002C00SPC800 are affected. A remote attacker with an established session can trigger a denial-of-service (device restart) by sending unspecified packets. The underlying root cause and exact vulnerable component are not detailed in the provided do...

CVE-2015-8230

CVE-2015-8230 affects Huawei eSpace 8950 IP phones (before V200R003C00SPC300). The issue is a memory leak caused by handling crafted ARP packets, leading to memory exhaustion and device restart (DoS). Public descriptions confirm the vulnerability exists in the eSpace 8950 line and that Huawei rel...

Multiple Cisco IP Phones Firmware Image Upload Vulnerability

A vulnerability in the TFTP implementation of the Cisco Small Business SPA30X and SPA50X IP Phones could allow an unauthenticated, local attacker to load arbitrary firmware images onto the affected device. The vulnerability is due to insufficient file integrity checks of the firmware image. An...

Cisco 9900 Series IP Phones Denial of Service Vulnerability

Cisco 9900 Series IP Phones is a 9900 series IP phone product from Cisco USA. This product provides voice and video features. A denial of service vulnerability exists in the Cisco 9900 Series IP Phones, which stems from the program's failure to properly support the RTP protocol. A remote attacker...

Cisco Unified IP Phones 9900 Series Denial of Service Vulnerability

A vulnerability in the packet storing capabilities of Cisco 9900 Series IP Phones could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to how the phone decoder handles certain real-time transport protocol RTP packets. An attacker...

Cisco UCS Central Software Security Vulnerabilities Patched

Cisco has patched a serious remote code execution vulnerability in its Unified Computing System UCS Central software, a data center platform that integrates processing, networking, storage and virtualization into one system. “An attacker could exploit this vulnerability by sending a crafted HTTP...

Cisco small business phone the firmware of the exposed high-risk vulnerabilities attackers can listen to private phone calls-vulnerability warning-the black bar safety net

The vulnerabilityCVE-2 0 1 5-0 6 7 0in the presence of is actually because some Cisco IP Phone default configuration contains a number of inappropriate settings. It allows an attacker to the affected device sends a special XML request to control the device. In addition, the vulnerability can be...