CVE-2014-0737

Cisco Unified IP Phone 7960g - Authentication Bypass

Title source: rule

Description

The Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj66795.

Scores

EPSS 0.0019
EPSS Percentile 40.9%

Classification

CWE
CWE-287
Status draft

Affected Products (1)

cisco/unified_ip_phone_7960g

Timeline

Published Feb 22, 2014
Tracked Since Feb 18, 2026