PT-2012-3191
CVE-2012-1328
·
تاريخ النشر
2012-05-03
·
تاريخ التحديث
2017-12-07
الوصف من
CVSS 2.0
4.6
متوسطةالمقاييسAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2
Description
The issue is related to the improper handling of configuration information downloads to an RT phone, allowing local users to gain privileges via injected data.
Recommendations
For firmware 9.1, update to a version that properly handles configuration information downloads.
For firmware 9.2, update to a version that properly handles configuration information downloads.
As a temporary workaround, consider restricting access to the configuration download feature until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾