Cisco Unified IP Phones 9951 Firmware vulnerabilities

2 CVEs affecting Cisco Unified IP Phones 9951 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0604, published 2015-02-07.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-0604, published 2015-02-07. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests,…
• CVE-2015-0601, published 2015-02-07. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause a denial of service (device reload) via crafted commands, aka Bug ID CSCup92790.