Cisco Unified IP Phone 7960g vulnerabilities

2 CVEs affecting Cisco Unified IP Phone 7960g, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0737, published 2014-02-22.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-4444, published 2009-01-16. High severity, CVSS 7.1. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service (device reboot) or…
• CVE-2014-0737, published 2014-02-22. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. The Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID…