CVEvulnerability
CVE-2007-1062
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-02-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time
Affected configurations
• cisco unified ip conference station 7935 firmware (<= 3.2\(15\))
• cisco unified ip conference station firmware 7936 (<= 3.3\(12\))
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://osvdb.org/45245 Broken Link
- http://secunia.com/advisories/24262 Vendor Advisory
- http://securitytracker.com/id?1017680 Third Party Advisory, VDB Entry
- http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/22647 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/0688 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32623 VDB Entry
- http://osvdb.org/45245 Broken Link
- http://secunia.com/advisories/24262 Vendor Advisory
- http://securitytracker.com/id?1017680 Third Party Advisory, VDB Entry
- http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/22647 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/0688 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32623 VDB Entry