CVE-2013-5533: Cisco Unified IP Phone 9951

Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days.

The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.

Affected products

• Cisco Unified IP Phone 9951
• Cisco Unified IP Phone 9971
• Cisco Unified IP Phones 9900 Series Firmware: affected versions not specified

Published 2013-10-11. Last modified 2026-06-16.