{"api_version":"1","generated_at":"2026-07-23T10:45:36+00:00","cve":"CVE-2007-1062","urls":{"html":"https://cve.report/CVE-2007-1062","api":"https://cve.report/api/cve/CVE-2007-1062.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-1062","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-1062"},"summary":{"title":"CVE-2007-1062","description":"The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time","state":"PUBLISHED","assigner":"mitre","published_at":"2007-02-22 01:28:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-287","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://osvdb.org/45245","name":"http://osvdb.org/45245","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/24262","name":"http://secunia.com/advisories/24262","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco Unified IP Conference Station / IP Phone Default Accounts - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml","name":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco - Networking, Cloud, and Cybersecurity Solutions","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml","name":"http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco - Networking, Cloud, and Cybersecurity Solutions","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0688","name":"http://www.vupen.com/english/advisories/2007/0688","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32623","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32623","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/22647","name":"http://www.securityfocus.com/bid/22647","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Cisco Unified IP Conference Station and Unified IP Phone Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1017680","name":"http://securitytracker.com/id?1017680","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Cisco Unified IP Conference Station Credential Caching Bug Grants Administrative Access to Remote Users - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-1062","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1062","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"1062","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"unified_ip_conference_station_7935","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1062","vulnerable":"1","versionEndIncluding":"3.2\\(15\\)","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_ip_conference_station_7935_firmware","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1062","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"unified_ip_conference_station_7936","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"1062","vulnerable":"1","versionEndIncluding":"3.3\\(12\\)","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_ip_conference_station_firmware_7936","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:43:22.488Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20070221 Identifying and Mitigating Exploitation of Cisco Unified IP Conference Station and IP Phone Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml"},{"name":"20070221 Cisco Unified IP Conference Station and IP Phone Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml"},{"name":"24262","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/24262"},{"name":"1017680","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1017680"},{"name":"22647","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/22647"},{"name":"45245","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/45245"},{"name":"ADV-2007-0688","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/0688"},{"name":"cisco-unified-ip-conference-url-auth-bypass(32623)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32623"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-02-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time"}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20070221 Identifying and Mitigating Exploitation of Cisco Unified IP Conference Station and IP Phone Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml"},{"name":"20070221 Cisco Unified IP Conference Station and IP Phone Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml"},{"name":"24262","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/24262"},{"name":"1017680","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1017680"},{"name":"22647","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/22647"},{"name":"45245","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/45245"},{"name":"ADV-2007-0688","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/0688"},{"name":"cisco-unified-ip-conference-url-auth-bypass(32623)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32623"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-1062","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20070221 Identifying and Mitigating Exploitation of Cisco Unified IP Conference Station and IP Phone Vulnerabilities","refsource":"CISCO","url":"http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml"},{"name":"20070221 Cisco Unified IP Conference Station and IP Phone Vulnerabilities","refsource":"CISCO","url":"http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml"},{"name":"24262","refsource":"SECUNIA","url":"http://secunia.com/advisories/24262"},{"name":"1017680","refsource":"SECTRACK","url":"http://securitytracker.com/id?1017680"},{"name":"22647","refsource":"BID","url":"http://www.securityfocus.com/bid/22647"},{"name":"45245","refsource":"OSVDB","url":"http://osvdb.org/45245"},{"name":"ADV-2007-0688","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/0688"},{"name":"cisco-unified-ip-conference-url-auth-bypass(32623)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32623"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-1062","datePublished":"2007-02-22T01:00:00.000Z","dateReserved":"2007-02-21T00:00:00.000Z","dateUpdated":"2024-08-07T12:43:22.488Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-02-22 01:28:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-287","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_ip_conference_station_7935_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2\\(15\\)","matchCriteriaId":"FEB9E107-A173-4570-A0EA-93D109D589A9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_conference_station_7935:-:*:*:*:*:*:*:*","matchCriteriaId":"85E03C0E-248B-4AFC-82BC-4A4D52F05E95"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_ip_conference_station_firmware_7936:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3\\(12\\)","matchCriteriaId":"8DF009E7-9F77-443B-97F9-5F1E6EB4A04A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_conference_station_7936:-:*:*:*:*:*:*:*","matchCriteriaId":"09A19EA1-6199-4EEE-9457-5EC8D6AC1D63"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"1062","Ordinal":"1","Title":"CVE-2007-1062","CVE":"CVE-2007-1062","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"1062","Ordinal":"1","NoteData":"The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time","Type":"Description","Title":"CVE-2007-1062"},{"CveYear":"2007","CveId":"1062","Ordinal":"2","NoteData":"2007-02-21","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"1062","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}