← Back

Unified Ip Phone Firmware

unified_ip_phone_firmware

Vendor: Cisco • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cisco
2Ip Phone Firmware
Unified Ip Phone Firmware
Nov 21, 2024
Jun 7, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A vulnerability in the Session Initiation Protocol (SIP) ingress packet processing of Cisco Unified IP Phone software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vuln...Show more
A vulnerability in the Session Initiation Protocol (SIP) ingress packet processing of Cisco Unified IP Phone software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a lack of flow-control mechanisms in the software. An attacker could exploit this vulnerability by sending high volumes of SIP INVITE traffic to the targeted device. Successful exploitation could allow the attacker to cause a disruption of services on the targeted IP phone. Cisco Bug IDs: CSCve10064, CSCve14617, CSCve14638, CSCve14683, CSCve20812, CSCve20926, CSCve20945.Show less
1Cisco
4Unified Ip Phone 8961
Unified Ip Phone 9951Unified Ip Phone 9971+1 more
Apr 29, 2026
Nov 13, 2013
N/A· v4
N/A· v3
6.6 MEDIUM· v2
The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug...Show more
The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.Show less
1Cisco
2Unified Ip Phone 8945
Unified Ip Phone Firmware
Apr 29, 2026
Aug 29, 2013
N/A· v4
N/A· v3
7.8 HIGH· v2
The Cisco Unified IP Phone 8945 with software 9.3(2) allows remote attackers to cause a denial of service (device hang) via a malformed PNG file, aka Bug ID CSCud04270.
1Cisco
2Unified Ip Phone
Unified Ip Phone Firmware
Apr 29, 2026
May 3, 2012
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected dat...Show more
Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.Show less