Cisco Unified IP Phone 7960G CTL Trust Chain Enforcement Security Bypass Vulnerability
BID:65705
Info
Cisco Unified IP Phone 7960G CTL Trust Chain Enforcement Security Bypass Vulnerability
| Bugtraq ID: | 65705 |
| Class: | Design Error |
| CVE: |
CVE-2014-0737 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 20 2014 12:00AM |
| Updated: | Feb 25 2014 01:52AM |
| Credit: | Cisco |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cisco Unified IP Phone 7960G CTL Trust Chain Enforcement Security Bypass Vulnerability
Cisco Unified IP Phone 7960G is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks.
This issue is tracked by Cisco Bug ID CSCuj66795.
Cisco Unified IP Phone 7960G is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks.
This issue is tracked by Cisco Bug ID CSCuj66795.
Exploit / POC
Cisco Unified IP Phone 7960G CTL Trust Chain Enforcement Security Bypass Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
Cisco Unified IP Phone 7960G CTL Trust Chain Enforcement Security Bypass Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Cisco Unified IP Phone 7960G CTL Trust Chain Enforcement Security Bypass Vulnerability
References:
References:
- Cisco Unified IP Phone Homepage (Cisco )