Cisco Unified Wireless IP Phone 7920 Firmware vulnerabilities

2 CVEs affecting Cisco Unified Wireless IP Phone 7920 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6360, published 2016-04-21.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-6360, published 2016-04-21. High severity, CVSS 7.5. EPSS: 8.3% chance of exploitation in the next 30 days. The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
• CVE-2005-3803, published 2005-11-24. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco IP Phone (VoIP) 7920 1.0(8) contains certain hard-coded ("fixed") public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information.