CVEvulnerability
CVE-2012-5445
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-12-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a crafted binary.
Affected configurations
• cisco skinny client control protocol software (<= 9.2\(4\))
• cisco skinny client control protocol software 1.0\(1\)
• cisco skinny client control protocol software 1.0\(2\)
• cisco skinny client control protocol software 1.0\(3\)
• cisco skinny client control protocol software 1.0\(4\)
• cisco skinny client control protocol software 1.0\(5\)
• cisco skinny client control protocol software 1.0\(9\)
• cisco skinny client control protocol software 1.1\(1\)
• cisco skinny client control protocol software 1.2\(1\)
• cisco skinny client control protocol software 1.3\(1\)
• cisco skinny client control protocol software 1.3\(2\)
• cisco skinny client control protocol software 1.3\(3\)
• cisco skinny client control protocol software 1.3\(4\)
• cisco skinny client control protocol software 1.4\(1\)
• cisco skinny client control protocol software 1.4\(2\)
• cisco skinny client control protocol software 2.0\(0\)
• cisco skinny client control protocol software 2.0\(1\)
• cisco skinny client control protocol software 3.0
• cisco skinny client control protocol software 3.0\(0\)
• cisco skinny client control protocol software 3.0\(1\)
• cisco skinny client control protocol software 3.0\(2\)
• cisco skinny client control protocol software 3.1
• cisco skinny client control protocol software 3.1\(1\)
• cisco skinny client control protocol software 3.1\(2\)
• cisco skinny client control protocol software 3.1\(3\)
• cisco skinny client control protocol software 3.1\(4\)
• cisco skinny client control protocol software 3.1\(6\)
• cisco skinny client control protocol software 3.1\(10\)
• cisco skinny client control protocol software 3.1\(11\)
• cisco skinny client control protocol software 3.2
• cisco skinny client control protocol software 3.2\(1\)
• cisco skinny client control protocol software 3.2\(2\)
• cisco skinny client control protocol software 3.2\(3\)
• cisco skinny client control protocol software 3.2\(4\)
• cisco skinny client control protocol software 3.2\(5\)
• cisco skinny client control protocol software 3.2\(6\)
• cisco skinny client control protocol software 3.2\(6a\)
• cisco skinny client control protocol software 3.2\(7\)
• cisco skinny client control protocol software 3.2\(8\)
• cisco skinny client control protocol software 3.2\(9\)
• cisco skinny client control protocol software 3.2\(10\)
• cisco skinny client control protocol software 3.2\(11\)
• cisco skinny client control protocol software 3.2\(12\)
• cisco skinny client control protocol software 3.2\(13\)
• cisco skinny client control protocol software 3.2\(14\)
• cisco skinny client control protocol software 3.2\(15\)
• cisco skinny client control protocol software 3.3\(2\)
• cisco skinny client control protocol software 3.3\(3\)
• cisco skinny client control protocol software 3.3\(4\)
• cisco skinny client control protocol software 3.3\(5\)
• cisco skinny client control protocol software 3.3\(6\)
• cisco skinny client control protocol software 3.3\(7\)
• cisco skinny client control protocol software 3.3\(8\)
• cisco skinny client control protocol software 3.3\(9\)
• cisco skinny client control protocol software 3.3\(10\)
• cisco skinny client control protocol software 3.3\(11\)
• cisco skinny client control protocol software 3.3\(12\)
• cisco skinny client control protocol software 3.3\(13\)
• cisco skinny client control protocol software 3.3\(14\)
• cisco skinny client control protocol software 3.3\(15\)
… and 78 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://events.ccc.de/congress/2012/Fahrplan/events/5400.en.html events.ccc.de
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-uipphone tools.cisco.com
- http://events.ccc.de/congress/2012/Fahrplan/events/5400.en.html events.ccc.de
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-uipphone tools.cisco.com