CVE-2013-6685

The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:cisco:unified_ip_phone_firmware:-:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:unified_ip_phone_8961:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:unified_ip_phone_9971:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:unified_ip_phone_9951:*:*:*:*:*:*:*:*

Information

Published : 2013-11-13 07:55

Updated : 2013-11-14 11:45


NVD link : CVE-2013-6685

Mitre link : CVE-2013-6685


JSON object : View

CWE
CWE-264

Permissions, Privileges, and Access Controls

Advertisement

dedicated server usa

Products Affected

cisco

  • unified_ip_phone_8961
  • unified_ip_phone_9951
  • unified_ip_phone_firmware
  • unified_ip_phone_9971