Detections
Analytics
Cisco Unified IP Phones 7900 Permissions, Privileges, and Access Controls (CVE-2011-1602)
medium Tenable OT Security Plugin ID 502084
Synopsis
The remote OT asset is affected by a vulnerability.Description
The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
http://www.securitytracker.com/id?1025588
http://secunia.com/advisories/44814/
Plugin Details
Severity: Medium
ID: 502084
Version: 1.1
Type: remote
Family: Tenable.ot
Published: 3/18/2024
Updated: 3/18/2024
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.6
Temporal Score: 4.9
Vector: CVSS2#AV:L/AC:M/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2011-1602
Vulnerability Information
CPE: cpe:/h:cisco:unified_ip_phone_7906, cpe:/h:cisco:unified_ip_phone_7911g, cpe:/h:cisco:unified_ip_phone_7931g, cpe:/h:cisco:unified_ip_phone_7941g, cpe:/h:cisco:unified_ip_phone_7941g-ge, cpe:/h:cisco:unified_ip_phone_7942g, cpe:/h:cisco:unified_ip_phone_7945g, cpe:/h:cisco:unified_ip_phone_7961g, cpe:/h:cisco:unified_ip_phone_7961g-ge, cpe:/h:cisco:unified_ip_phone_7962g, cpe:/h:cisco:unified_ip_phone_7965g, cpe:/h:cisco:unified_ip_phone_7970g, cpe:/h:cisco:unified_ip_phone_7971g-ge, cpe:/h:cisco:unified_ip_phone_7975g
Required KB Items: Tenable.ot/Cisco
Exploit Ease: No known exploits are available
Patch Publication Date: 6/2/2011
Vulnerability Publication Date: 6/2/2011
Reference Information
CVE: CVE-2011-1602