PT-2014-3801 · Cisco · Cisco Unified Ip Phone 7960G

Publicado 2014-02-22 · Atualizado 2014-03-06 · CVE-2014-0737

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unified IP Phone 7960G versions 9.2(1) and earlier

Description The issue allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file.

Recommendations For Cisco Unified IP Phone 7960G versions 9.2(1) and earlier, update to a version later than 9.2(1) to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2014-0737

Produtos afetados

Cisco Unified Ip Phone 7960G

Referências · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0737 · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewAlert.x?alertId=32957 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0737 · Nota de Segurança