Cisco Unified IP Conference Station 7937g Firmware vulnerabilities

4 CVEs affecting Cisco Unified IP Conference Station 7937g Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-16139, published 2020-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-16139, published 2020-08-12. High severity, CVSS 7.5. EPSS: 79.8% chance of exploitation in the next 30 days. A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove…
CVE-2020-16138, published 2020-08-12. High severity, CVSS 7.5. EPSS: 21.4% chance of exploitation in the next 30 days. A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the device until it is power cycled. Note: We cannot prove this…
CVE-2020-16137, published 2020-08-12. Critical severity, CVSS 9.8. EPSS: 19.4% chance of exploitation in the next 30 days. A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to reset the credentials for the SSH administrative console to arbitrary values.…
CVE-2013-3435, published 2013-07-23. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. The Cisco Unified IP Conference Station 7937G allows remote attackers to cause a denial of service (networking outage) via a flood of TCP packets, aka Bug ID CSCuh42052.