CVE-2012-1328: Cisco Unified IP Phone

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.

Affected products

• Cisco Unified IP Phone: version 9900 only
• Cisco Unified IP Phone Firmware: version 9.1 only; version 9.2 only

Published 2012-05-03. Last modified 2026-06-16.