CVE-2014-0658

CVE-2014-0658 affects Cisco 9900 Series Unified IP Phones . The issue arises in SIP header processing, where a crafted SIP header can cause the device to unregister, producing a denial-of-service condition. Public sources consistently identify the vulnerability as CSCul24898. Exploitation details...

CVE-2013-3426

CVE-2013-3426 affects Cisco 9900 Series IP phones: the Serviceability servlet does not properly restrict path values, enabling a remote attacker to read arbitrary files by supplying a pathname in a file request (Bug CSCuh52810). The issue is described as unauthenticated remote access with potenti...

CVE-2013-6685

The CVE-2013-6685 issue affects Cisco Unified IP Phone models 8961, 9951, and 9971. Root cause: weak permissions on memory block devices, enabling a local attacker to gain privileges by mounting a device that contains a setuid file in its filesystem. Impact: local privilege elevation on affected ...

CVE-2013-5533

CVE-2013-5533 affects Cisco Unified IP Phones 9900 Series. The vulnerability arises in the image-upgrade functionality where an authenticated, local attacker can gain privileges by injecting shell commands into an unsanitized parameter during the upgrade process, enabling command execution with O...

CVE-2013-5532

The CVE-2013-5532 case affects Cisco 9900 Series IP phones. The issue is a buffer overflow in the web-application interface caused by insufficient validation of certain input fields, allowing remote attackers to trigger a denial of service (webapp interface outage). Reported by Cisco and Red Hat ...

CVE-2013-5526

The CVE-2013-5526 issue affects Cisco Unified IP Phone 8900/9900 series (Cisco 9900 fourth‑gen phones). It stems from improper SDP negotiation in the phones’ SDP handling, allowing an unauthenticated remote attacker to trigger a device reboot (DoS) by sending crafted SDP packets. Exploitation rel...