Vulnerability Description
The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Ip Phone 7906 | All versions |
| Cisco | Unified Ip Phone 7911G | All versions |
| Cisco | Unified Ip Phone 7931G | All versions |
| Cisco | Unified Ip Phone 7941G | All versions |
| Cisco | Unified Ip Phone 7941G-Ge | All versions |
| Cisco | Unified Ip Phone 7942G | All versions |
| Cisco | Unified Ip Phone 7945G | All versions |
| Cisco | Unified Ip Phone 7961G | All versions |
| Cisco | Unified Ip Phone 7961G-Ge | All versions |
| Cisco | Unified Ip Phone 7962G | All versions |
| Cisco | Unified Ip Phone 7965G | All versions |
| Cisco | Unified Ip Phone 7970G | All versions |
| Cisco | Unified Ip Phone 7971G-Ge | All versions |
| Cisco | Unified Ip Phone 7975G | All versions |
| Cisco | Skinny Client Control Protocol Software | <= 9.0\(2\) |
Related Weaknesses (CWE)
References
- http://osvdb.org/72717
- http://secunia.com/advisories/44814/
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.sVendor Advisory
- http://www.securityfocus.com/bid/48074
- http://www.securitytracker.com/id?1025588
- http://osvdb.org/72717
- http://secunia.com/advisories/44814/
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.sVendor Advisory
- http://www.securityfocus.com/bid/48074
- http://www.securitytracker.com/id?1025588
FAQ
What is CVE-2011-1602?
CVE-2011-1602 is a vulnerability with a CVSS score of 6.6 (MEDIUM). The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426.
How severe is CVE-2011-1602?
CVE-2011-1602 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-1602?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Ip Phone 7906, Cisco Unified Ip Phone 7911G, Cisco Unified Ip Phone 7931G, Cisco Unified Ip Phone 7941G, Cisco Unified Ip Phone 7941G-Ge.