Description
The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063.
References (5)
Core 5
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24262
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/22647
Broken Link vdb-entry
x_refsource_osvdb
http://osvdb.org/33064
Scores
EPSS
0.0032
EPSS Percentile
24.7%
Details
CWE
CWE-264
Status
published
Products (6)
cisco/unified_ip_phone_firmware_7906g
8.0\(4\) sr1
cisco/unified_ip_phone_firmware_7911g
8.0\(4\) sr1
cisco/unified_ip_phone_firmware_7941g
8.0\(4\) sr1
cisco/unified_ip_phone_firmware_7961g
8.0\(4\) sr1
cisco/unified_ip_phone_firmware_7970g
8.0\(4\) sr1
cisco/unified_ip_phone_firmware_7971g
8.0\(4\) sr1
Published
Feb 22, 2007
Tracked Since
Feb 18, 2026