CVE-2012-0333

Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768...

CVE-2012-0333

Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768...

CVE-2012-0333

Cisco Small Business IP phones (SPA 500 series) with firmware 7.4.9 and earlier are affected by CVE-2012-0333 because Push XML requests do not require authentication, enabling remote attackers to initiate calls via crafted XML (Bug CSCts08768). Affected product: SPA 500 series; root cause: unauth...

CVE-2012-0333: Improper Authentication

Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768...

PT-2012-2508

Name of the Vulnerable Software and Affected Versions Cisco Small Business IP phones with SPA 500 series firmware versions 7.4.9 and earlier Description The issue allows remote attackers to make unauthorized telephone calls by sending an XML document, as no authentication is required for Push XML...

D-link DPH 150SE/E/F1 IP Phones multiple security vulnerabilities

Multiple web interface unauthorized access possibilities...

CVE-2011-1637

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962...

Code injection

The su utility on Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426...

CVE-2011-1602

The su utility on Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426...

Code injection

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962...

Command injection

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815...

CVE-2011-1603

CVE-2011-1603 affects Cisco Unified IP Phones 7900 Series running software before 9.2.1. The two privilege-escalation flaws (CVE-2011-1602, CVE-2011-1603) could let an authenticated local user change configurations or access information; a separate signature-verification bypass (CVE-2011-1637) co...

CVE-2011-1603

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815...

CVE-2011-1602

Cisco Unified IP Phones 7900 Series (TNP phones) are affected by CVE-2011-1602 due to two privilege-escalation vulnerabilities in the su utility. Devices with software before 9.0.3 could allow an authenticated local attacker to change phone configuration or disclose information; the CVSS base sco...

CVE-2011-1637

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962...

CVE-2011-1637

CVE-2011-1637 affects Cisco Unified IP Phones 7900 Series (TNP phones). The issue is an insecure signature verification check that allows an authenticated, local attacker to load a software image without verification, due to improper verification of signatures. Root cause: unsigned code installat...

CVE-2011-1602

The su utility on Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426...

Cisco Unified IP Phones 7900 series security vulnerabilites

Privilege escalation, signature check bypass for software images...

PT-2011-3246

Name of the Vulnerable Software and Affected Versions Cisco Unified IP Phones 7900 devices aka TNP phones versions prior to 9.0.3 Description The issue allows local users to gain privileges via unspecified vectors. Recommendations For versions prior to 9.0.3, update to version 9.0.3 or later to...

Cisco Releases Security Advisories for Multiple Products

Cisco has released security advisories for four products to address multiple vulnerabilities. These products include Cisco Unified IP phones, Cisco Network Registrar, Cisco AnyConnect Secure Mobility Client, and Cisco Media Experience. Exploitation of the vulnerabilities may allow an attacker to...