CVEvulnerability
CVE-2007-1072
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-02-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063.
Affected configurations
• cisco unified ip phone firmware 7906g 8.0\(4\)
• cisco unified ip phone firmware 7911g 8.0\(4\)
• cisco unified ip phone firmware 7941g 8.0\(4\)
• cisco unified ip phone firmware 7961g 8.0\(4\)
• cisco unified ip phone firmware 7970g 8.0\(4\)
• cisco unified ip phone firmware 7971g 8.0\(4\)
Related
Weakness · not in database (1)
References
- http://osvdb.org/33064 Broken Link
- http://secunia.com/advisories/24262 Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/22647 Third Party Advisory, VDB Entry
- http://osvdb.org/33064 Broken Link
- http://secunia.com/advisories/24262 Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/22647 Third Party Advisory, VDB Entry