Cisco Unified IP Phone 9951 vulnerabilities

6 CVEs affecting Cisco Unified IP Phone 9951, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0658, published 2014-01-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0658, published 2014-01-10. Medium severity, CVSS 5.4. EPSS: 2.7% chance of exploitation in the next 30 days. Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP header, aka Bug ID CSCul24898.
CVE-2013-5532, published 2013-10-11. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service (webapp interface outage) via long values in unspecified fields, aka Bug…
CVE-2013-5526, published 2013-10-10. High severity, CVSS 7.1. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service (device reboot) via crafted SDP packets, aka Bug ID…
CVE-2013-3426, published 2013-07-18. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID…
CVE-2013-6685, published 2013-11-13. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its…
CVE-2013-5533, published 2013-10-11. Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days. The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.