medium4.6
CVE-2012-1328
Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allow…
Impact
Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Ip Phone | Version 9900 |
| Cisco | Unified Ip Phone Firmware | Versions 9.1, 9.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/9971_9951_8961/firmware/9_2_3/release_notes/9900_8900_923.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75412
- http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/9971_9951_8961/firmware/9_2_3/release_notes/9900_8900_923.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75412