Description
Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.
References
- 1025588 vdb-entry
- 44814 third-party-advisory
- 48075 vdb-entry
- 72719 vdb-entry
- 20110601 Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series vendor-advisory
- cisco-uipp-sign-security-bypass(67743) vdb-entry