CVEvulnerability
CVE-2012-1328
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.
Affected configurations
• cisco unified ip phone 9900
• cisco unified ip phone firmware 9.1
• cisco unified ip phone firmware 9.2
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/9971_9951_8961/firmware/9_2_3/release_notes/9900_8900_923.html www.cisco.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75412 exchange.xforce.ibmcloud.com
- http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/9971_9951_8961/firmware/9_2_3/release_notes/9900_8900_923.html www.cisco.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75412 exchange.xforce.ibmcloud.com