CVE-2007-1063 The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to ac...
HighCVSS 10.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified ip phone firmware 7906g | = 8.0(4)-sr1 | No fix listed |
| cisco unified ip phone firmware 7911g | = 8.0(4)-sr1 | No fix listed |
| cisco unified ip phone firmware 7941g | = 8.0(4)-sr1 | No fix listed |
| cisco unified ip phone firmware 7961g | = 8.0(4)-sr1 | No fix listed |
| cisco unified ip phone firmware 7970g | = 8.0(4)-sr1 | No fix listed |
| cisco unified ip phone firmware 7971g | = 8.0(4)-sr1 | No fix listed |
References
- 45246 broken-link vdb-entry
- 24262 third-party-advisory vendor-advisory
- 20070221 Identifying and Mitigating Exploitation of Cisco Unified IP Conference Station and IP Phone Vulnerabilities vendor-advisory
- 20070221 Cisco Unified IP Conference Station and IP Phone Vulnerabilities patch vendor-advisory
- 22647 third-party-advisory vdb-entry
- 1017681 third-party-advisory vdb-entry
- ADV-2007-0689 third-party-advisory vdb-entry
- cisco-unified-ip-phone-default-user-account(32627) third-party-advisory vdb-entry