Unified Ip Phones 9900 Series Firmware

unified_ip_phones_9900_series_firmware

Vendor: Cisco • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-4226 1Cisco 1Unified Ip Phones 9900 Series Firmware May 6, 2026 Jun 30, 2015 N/A· v4 N/A· v3 7.1 HIGH· v2 The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets a...Show more The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.Show less
CVE-2015-0602 1Cisco 1Unified Ip Phones 9900 Series Firmware May 6, 2026 Feb 7, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117.
CVE-2015-0600 1Cisco 1Unified Ip Phones 9900 Series Firmware May 6, 2026 Feb 7, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to cause a denial of service (logoff) via crafted packets, aka Bug ID CSCuq12139.
CVE-2015-0603 1Cisco 1Unified Ip Phones 9900 Series Firmware May 6, 2026 Feb 7, 2015 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service (persistent hang or reboot) by writing to a phone's filesys...Show more Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service (persistent hang or reboot) by writing to a phone's filesystem, aka Bug ID CSCup90474.Show less
CVE-2014-0658 1Cisco 3Unified Ip Phone 9951 Unified Ip Phone 9971Unified Ip Phones 9900 Series Firmware Apr 29, 2026 Jan 10, 2014 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP header, aka Bug ID CSCul24898.
CVE-2013-5533 1Cisco 3Unified Ip Phone 9951 Unified Ip Phone 9971Unified Ip Phones 9900 Series Firmware Apr 29, 2026 Oct 11, 2013 N/A· v4 N/A· v3 6.0 MEDIUM· v2 The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.
CVE-2013-5532 1Cisco 3Unified Ip Phone 9951 Unified Ip Phone 9971Unified Ip Phones 9900 Series Firmware Apr 29, 2026 Oct 11, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service (webapp interface outage) via long values in unspecified fields, aka Bug ID CSCuh10343.
CVE-2013-3426 1Cisco 3Unified Ip Phone 9951 Unified Ip Phone 9971Unified Ip Phones 9900 Series Firmware Apr 29, 2026 Jul 18, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810.