CVE-2015-0603: Cisco Unified IP Phones 9900 Series Firmware

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service (persistent hang or reboot) by writing to a phone's filesystem, aka Bug ID CSCup90474.

Affected products

• Cisco Unified IP Phones 9900 Series Firmware: up to and including 9.4\(.1\)

Published 2015-02-07. Last modified 2026-06-17.