CVE-2013-6685

Published: Nov 13, 2013Modified: Apr 29, 2026

6.6

Vector

AV:L/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 2.7 / Impact: 10.0

Source: NVD

Description

The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.

Affected (4)

Products: Cisco: Unified Ip Phone Firmware, Unified Ip Phone 8961, Unified Ip Phone 9951, Unified Ip Phone 9971

Cisco

4 products

Unified Ip Phone Firmware

Unified Ip Phone 8961

Unified Ip Phone 9951

Unified Ip Phone 9971

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Ip Phone Firmware	All versions
Cisco Unified Ip Phone 8961	All versions
Cisco Unified Ip Phone 9951	All versions
Cisco Unified Ip Phone 9971	All versions

Related CWEs

CWE-264

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6685

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6685

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.