CVE-2013-6685
Cisco Unified IP Phone Firmware - Local Privilege Escalation via Weak Memory Block Device Permissions
Title source: llmDescription
The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6685
Scores
EPSS
0.0028
EPSS Percentile
20.4%
Details
CWE
CWE-264
Status
published
Products (4)
cisco/unified_ip_phone_8961
cisco/unified_ip_phone_9951
cisco/unified_ip_phone_9971
cisco/unified_ip_phone_firmware
Published
Nov 13, 2013
Tracked Since
Feb 18, 2026