CVEvulnerability

CVE-2012-5445

6.8 MEDIUM Published 2012-12-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-12-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a crafted binary.

Affected configurations

• cisco skinny client control protocol software (<= 9.2\(4\)) • cisco skinny client control protocol software 1.0\(1\) • cisco skinny client control protocol software 1.0\(2\) • cisco skinny client control protocol software 1.0\(3\) • cisco skinny client control protocol software 1.0\(4\) • cisco skinny client control protocol software 1.0\(5\) • cisco skinny client control protocol software 1.0\(9\) • cisco skinny client control protocol software 1.1\(1\) • cisco skinny client control protocol software 1.2\(1\) • cisco skinny client control protocol software 1.3\(1\) • cisco skinny client control protocol software 1.3\(2\) • cisco skinny client control protocol software 1.3\(3\) • cisco skinny client control protocol software 1.3\(4\) • cisco skinny client control protocol software 1.4\(1\) • cisco skinny client control protocol software 1.4\(2\) • cisco skinny client control protocol software 2.0\(0\) • cisco skinny client control protocol software 2.0\(1\) • cisco skinny client control protocol software 3.0 • cisco skinny client control protocol software 3.0\(0\) • cisco skinny client control protocol software 3.0\(1\) • cisco skinny client control protocol software 3.0\(2\) • cisco skinny client control protocol software 3.1 • cisco skinny client control protocol software 3.1\(1\) • cisco skinny client control protocol software 3.1\(2\) • cisco skinny client control protocol software 3.1\(3\) • cisco skinny client control protocol software 3.1\(4\) • cisco skinny client control protocol software 3.1\(6\) • cisco skinny client control protocol software 3.1\(10\) • cisco skinny client control protocol software 3.1\(11\) • cisco skinny client control protocol software 3.2 • cisco skinny client control protocol software 3.2\(1\) • cisco skinny client control protocol software 3.2\(2\) • cisco skinny client control protocol software 3.2\(3\) • cisco skinny client control protocol software 3.2\(4\) • cisco skinny client control protocol software 3.2\(5\) • cisco skinny client control protocol software 3.2\(6\) • cisco skinny client control protocol software 3.2\(6a\) • cisco skinny client control protocol software 3.2\(7\) • cisco skinny client control protocol software 3.2\(8\) • cisco skinny client control protocol software 3.2\(9\) • cisco skinny client control protocol software 3.2\(10\) • cisco skinny client control protocol software 3.2\(11\) • cisco skinny client control protocol software 3.2\(12\) • cisco skinny client control protocol software 3.2\(13\) • cisco skinny client control protocol software 3.2\(14\) • cisco skinny client control protocol software 3.2\(15\) • cisco skinny client control protocol software 3.3\(2\) • cisco skinny client control protocol software 3.3\(3\) • cisco skinny client control protocol software 3.3\(4\) • cisco skinny client control protocol software 3.3\(5\) • cisco skinny client control protocol software 3.3\(6\) • cisco skinny client control protocol software 3.3\(7\) • cisco skinny client control protocol software 3.3\(8\) • cisco skinny client control protocol software 3.3\(9\) • cisco skinny client control protocol software 3.3\(10\) • cisco skinny client control protocol software 3.3\(11\) • cisco skinny client control protocol software 3.3\(12\) • cisco skinny client control protocol software 3.3\(13\) • cisco skinny client control protocol software 3.3\(14\) • cisco skinny client control protocol software 3.3\(15\) … and 78 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References