PT-2020-14770 · Cisco · Cisco Unified Ip Conference Station 7937G

Published 2020-08-10 · Updated 2024-08-04 · CVE-2020-16138

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified IP Conference Station 7937G versions 1-4-4-0 through 1-4-5-7

Description A denial-of-service issue allows attackers to remotely disable the device until it is power cycled. The product is end of life and users are advised to remove or upgrade it.

Recommendations For versions 1-4-4-0 through 1-4-5-7, remove or upgrade the product to mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2020-16138

Affected Products

Cisco Unified Ip Conference Station 7937G

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/cisco/cisco_7937g_dos.py · Exploit
• 🔥 https://blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G · Exploit
• 🔥 https://packetstormsecurity.com/files/158819/Cisco-7937G-Denial-Of-Service.html · Exploit
• https://cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-phone-7940g/end_of_life_notice_c51-729487.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-16138 · Security Note
• https://osv.dev/vulnerability/CVE-2020-16138 · Vendor Advisory
• https://t.me/rnetsec/13061 · Telegram Post
• https://t.me/cybersecuritytechnologies/1569 · Telegram Post
• https://t.me/cvenotify/88993 · Telegram Post
• https://t.me/avleonovcom/756 · Telegram Post
• https://t.me/secharvester/9675 · Telegram Post
• https://t.me/defcon_news/54401 · Telegram Post