Vulnerability Description
Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Ip Phone 7906 | All versions |
| Cisco | Unified Ip Phone 7911G | All versions |
| Cisco | Unified Ip Phone 7931G | All versions |
| Cisco | Unified Ip Phone 7941G | All versions |
| Cisco | Unified Ip Phone 7941G-Ge | All versions |
| Cisco | Unified Ip Phone 7942G | All versions |
| Cisco | Unified Ip Phone 7945G | All versions |
| Cisco | Unified Ip Phone 7961G | All versions |
| Cisco | Unified Ip Phone 7961G-Ge | All versions |
| Cisco | Unified Ip Phone 7962G | All versions |
| Cisco | Unified Ip Phone 7965G | All versions |
| Cisco | Unified Ip Phone 7970G | All versions |
| Cisco | Unified Ip Phone 7971G-Ge | All versions |
| Cisco | Unified Ip Phone 7975G | All versions |
| Cisco | Skinny Client Control Protocol Software | <= 9.1\(1\) |
Related Weaknesses (CWE)
References
- http://osvdb.org/72719
- http://secunia.com/advisories/44814/
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.sVendor Advisory
- http://www.securityfocus.com/bid/48075
- http://www.securitytracker.com/id?1025588
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67743
- http://osvdb.org/72719
- http://secunia.com/advisories/44814/
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.sVendor Advisory
- http://www.securityfocus.com/bid/48075
- http://www.securitytracker.com/id?1025588
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67743
FAQ
What is CVE-2011-1637?
CVE-2011-1637 is a vulnerability with a CVSS score of 1.5 (LOW). Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image,...
How severe is CVE-2011-1637?
CVE-2011-1637 has been rated LOW with a CVSS base score of 1.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-1637?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Ip Phone 7906, Cisco Unified Ip Phone 7911G, Cisco Unified Ip Phone 7931G, Cisco Unified Ip Phone 7941G, Cisco Unified Ip Phone 7941G-Ge.