EUVD-2015-0616

Malware in sbrugna...

EUVD-2015-0615

Malware in sbrugna...

EUVD-2015-0617

Malware in sbrugna...

Cisco Unified IP Phone 9900 Series Mobility Extension Availability (CVE-2015-0600)

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to cause a denial of service logoff via crafted packets, aka Bug ID CSCuq12139. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Command injection

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to cause a denial of service logoff via crafted packets, aka Bug ID CSCuq12139...

Code injection

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117...

CVE-2015-0600

CVE-2015-0600 affects Cisco Unified IP Phone 9900 Series Mobility Extension on firmware 9.4(.1) and earlier. The root cause is insufficient validation of input in the mobility extension, allowing remote attackers to cause a denial of service (logoff) by sending crafted packets (Bug ID CSCuq12139)...

CVE-2015-0602

Cisco Unified IP Phone 9900 Series (firmware 9.4(.1) and earlier) contains a data-disclosure vulnerability in the mobility extension that allows remote attackers to obtain sensitive information by sniffing network traffic. Root cause is insufficient protections of information in transit. Impact i...

CVE-2015-0600

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to cause a denial of service logoff via crafted packets, aka Bug ID CSCuq12139...

CVE-2015-0602

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117...

CVE-2015-0604

The web framework on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424...

CVE-2015-0603

Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service persistent hang or reboot by writing to a phone's filesystem, aka Bug ID CSCup90474...

Command injection

The web framework on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424...

CVE-2015-0601

Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allow local users to cause a denial of service device reload via crafted commands, aka Bug ID CSCup92790...

CVE-2015-0604

Cisco Unified IP Phone 9900 Series (firmware 9.4(.1) and earlier) is affected by CVE-2015-0604 due to a vulnerable web framework that fails to validate HTTP requests, enabling remote attackers to upload files to arbitrary locations on the phone’s filesystem via crafted requests (Bug ID CSCup90424...

CVE-2015-0603

Cisco Unified IP Phone 9900 Series (firmware 9.4(.1) and earlier) expose weak file permissions on certain files, enabling a local authenticated attacker to cause a DoS (hang or reboot) by writing to the device filesystem. Root cause: insecure permissions. Impact: DoS on affected devices. Mitigati...

CVE-2015-0604

The web framework on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424...

CVE-2015-0603

Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service persistent hang or reboot by writing to a phone's filesystem, aka Bug ID CSCup90474...