Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-0529

Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command.

Published

2008-02-15T02:00:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware cisco unified_ip_phone 7906g No
Hardware cisco unified_ip_phone 7911g No
Hardware cisco unified_ip_phone 7935 No
Hardware cisco unified_ip_phone 7936 No
Hardware cisco unified_ip_phone 7940 No
Hardware cisco unified_ip_phone 7940g No
Hardware cisco unified_ip_phone 7941g No
Hardware cisco unified_ip_phone 7960 No
Hardware cisco unified_ip_phone 7960g No
Hardware cisco unified_ip_phone 7961g No
Hardware cisco unified_ip_phone 7970g No
Hardware cisco unified_ip_phone 7971g No
Application cisco skinny_client_control_protocol_\(sccp\)_firmware * Yes
Hardware cisco unified_ip_phone 7940 No
Hardware cisco unified_ip_phone 7940g No
Hardware cisco unified_ip_phone 7960 No
Hardware cisco unified_ip_phone 7960g No
Application cisco session_initiation_protocol_\(sip\)_firmware * Yes
References