Description
Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1025588
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/44814/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/48075
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/72719
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67743
Scores
EPSS
0.0027
EPSS Percentile
19.1%
Details
CWE
CWE-264
Status
published
Products (48)
cisco/skinny_client_control_protocol_software
1.0\(1\)
cisco/skinny_client_control_protocol_software
1.0\(2\) (2 CPE variants)
cisco/skinny_client_control_protocol_software
1.0\(3\)
cisco/skinny_client_control_protocol_software
1.0\(4\)
cisco/skinny_client_control_protocol_software
1.0\(5\)
cisco/skinny_client_control_protocol_software
1.0\(9\)
cisco/skinny_client_control_protocol_software
1.1\(1\)
cisco/skinny_client_control_protocol_software
1.2\(1\)
cisco/skinny_client_control_protocol_software
1.3\(1\)
cisco/skinny_client_control_protocol_software
1.3\(2\)
... and 38 more
Published
Jun 02, 2011
Tracked Since
Feb 18, 2026