CVE-2007-1062

Published: Feb 22, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time

Affected (2)

Products: Cisco: Unified Ip Conference Station 7935 Firmware, Unified Ip Conference Station Firmware 7936

2 products

Unified Ip Conference Station 7935 Firmware

Unified Ip Conference Station Firmware 7936

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Unified Ip Conference Station 7935 Firmware	Up to 3.2\(15\)

Running on/with	Platform Versions
Cisco Unified Ip Conference Station 7935	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Unified Ip Conference Station Firmware 7936	Up to 3.3\(12\)

Running on/with	Platform Versions
Cisco Unified Ip Conference Station 7936	All versions

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (16)

http://osvdb.org/45245

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/24262

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1017680

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml

Source: cve@mitre.org

Vendor Advisory

http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/22647

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2007/0688

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32623

Source: cve@mitre.org

VDB Entry

http://osvdb.org/45245

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/24262

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1017680

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/22647

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2007/0688

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32623

Source: af854a3a-2127-422b-91ae-364da2661108

VDB Entry

Timeline

No history available yet.