CVE-2002-0882: Cisco Skinny Client Control Protocol Software

Medium severity, CVSS 6.4. EPSS: 2.7% chance of exploitation in the next 30 days.

The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.

Affected products

• Cisco Skinny Client Control Protocol Software: version 3.0 only; version 3.1 only; version 3.2 only
• Cisco Voip Phone CP-7940: version 3.0 only; version 3.1 only; version 3.2 only

Published 2002-10-04. Last modified 2026-06-16.