CVE-2014-0737

Cisco CVE-2014-0737 affects the Cisco Unified IP Phone 7960G (9.2(1) and earlier). The root issue is insufficient CTL (Certificate Trust List) validation, allowing remote attackers to bypass authentication and inject a crafted CTL file to change trust relationships, enabling control over trusted ...