EUVD-2007-1069

Malware in sbrugna...

Cisco Unified IP Phone Use of Hard-coded Credentials (CVE-2007-1063)

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard- coded username and password, which allows remote attackers to access the device. This plugin only works with Tenable.ot. Please visit...

Command injection

The command line interface CLI in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063...