Description
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device.
References
- cisco-unified-ip-phone-default-user-account(32627) vdb-entry
- 20070221 Identifying and Mitigating Exploitation of Cisco Unified IP Conference Station and IP Phone Vulnerabilities vendor-advisory
- 20070221 Cisco Unified IP Conference Station and IP Phone Vulnerabilities vendor-advisory
- 45246 vdb-entry
- 24262 third-party-advisory
- ADV-2007-0689 vdb-entry
- 22647 vdb-entry
- 1017681 vdb-entry