CVE-2015-0604: Cisco Unified IP Phones 9951 Firmware

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424.

Affected products

• Cisco Unified IP Phones 9951 Firmware: version 9.4(.1) only
• Cisco Unified IP Phones 9971 Firmware: version 9.4(.1) only

Published 2015-02-07. Last modified 2026-06-17.