CVE-2007-1072: Cisco Unified IP Phone Firmware 7906g

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063.

Affected products

• Cisco Unified IP Phone Firmware 7906g: version 8.0(4) only
• Cisco Unified IP Phone Firmware 7911g: version 8.0(4) only
• Cisco Unified IP Phone Firmware 7941g: version 8.0(4) only
• Cisco Unified IP Phone Firmware 7961g: version 8.0(4) only
• Cisco Unified IP Phone Firmware 7970g: version 8.0(4) only
• Cisco Unified IP Phone Firmware 7971g: version 8.0(4) only

Published 2007-02-22. Last modified 2026-06-16.