Description
The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a crafted binary.
References (2)
Core 2
Core References
Various Sources vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-uipphone
Various Sources x_refsource_misc
http://events.ccc.de/congress/2012/Fahrplan/events/5400.en.html
Scores
EPSS
0.0040
EPSS Percentile
32.1%
Details
CWE
CWE-20
Status
published
Products (48)
cisco/skinny_client_control_protocol_software
1.0\(1\)
cisco/skinny_client_control_protocol_software
1.0\(2\) (2 CPE variants)
cisco/skinny_client_control_protocol_software
1.0\(3\)
cisco/skinny_client_control_protocol_software
1.0\(4\)
cisco/skinny_client_control_protocol_software
1.0\(5\)
cisco/skinny_client_control_protocol_software
1.0\(9\)
cisco/skinny_client_control_protocol_software
1.1\(1\)
cisco/skinny_client_control_protocol_software
1.2\(1\)
cisco/skinny_client_control_protocol_software
1.3\(1\)
cisco/skinny_client_control_protocol_software
1.3\(2\)
... and 38 more
Published
Dec 28, 2012
Tracked Since
Feb 18, 2026