CVE-2012-1328

Name of the Vulnerable Software and Affected Versions Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2

Description The issue is related to the improper handling of configuration information downloads to an RT phone, allowing local users to gain privileges via injected data.

Recommendations For firmware 9.1, update to a version that properly handles configuration information downloads. For firmware 9.2, update to a version that properly handles configuration information downloads. As a temporary workaround, consider restricting access to the configuration download feature until a patch is available.