PT-2020-14771 · Cisco · Cisco Unified Ip Conference Station 7937G

Published 2020-08-10 · Updated 2024-08-04 · CVE-2020-16139

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified IP Conference Station 7937G versions 1-4-4-0 through 1-4-5-7

Description A denial-of-service issue allows attackers to restart the device remotely by sending specially crafted packets. The product is end of life and users are advised to remove or upgrade it.

Recommendations For versions 1-4-4-0 through 1-4-5-7, remove or upgrade the product to mitigate the issue.

Exploit

Fix

Related Identifiers

CVE-2020-16139

Affected Products

Cisco Unified Ip Conference Station 7937G

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/cisco/cisco_7937g_dos_reboot.py · Exploit
• 🔥 http://packetstormsecurity.com/files/158819/Cisco-7937G-Denial-Of-Service.html · Exploit
• 🔥 https://blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-16139 · Security Note
• https://cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-phone-7940g/end_of_life_notice_c51-729487.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-16139 · Vendor Advisory
• https://t.me/cvenotify/82848 · Telegram Post
• https://t.me/cvenotify/88994 · Telegram Post
• https://t.me/rnetsec/13061 · Telegram Post
• https://t.me/avleonovcom/756 · Telegram Post
• https://t.me/secharvester/9675 · Telegram Post
• https://t.me/defcon_news/54401 · Telegram Post