Detections
Analytics
Cisco Unified IP Phones 7900 Permissions, Privileges, and Access Controls (CVE-2011-1603)
medium Tenable OT Security Plugin ID 502138
Synopsis
The remote OT asset is affected by a vulnerability.Description
Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
http://www.securitytracker.com/id?1025588
http://secunia.com/advisories/44814/
Plugin Details
Severity: Medium
ID: 502138
Version: 1.1
Type: remote
Family: Tenable.ot
Published: 3/18/2024
Updated: 3/18/2024
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.6
Temporal Score: 4.9
Vector: CVSS2#AV:L/AC:M/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2011-1603
Vulnerability Information
CPE: cpe:/h:cisco:unified_ip_phone_7906, cpe:/h:cisco:unified_ip_phone_7911g, cpe:/h:cisco:unified_ip_phone_7931g, cpe:/h:cisco:unified_ip_phone_7941g, cpe:/h:cisco:unified_ip_phone_7941g-ge, cpe:/h:cisco:unified_ip_phone_7942g, cpe:/h:cisco:unified_ip_phone_7945g, cpe:/h:cisco:unified_ip_phone_7961g, cpe:/h:cisco:unified_ip_phone_7961g-ge, cpe:/h:cisco:unified_ip_phone_7962g, cpe:/h:cisco:unified_ip_phone_7965g, cpe:/h:cisco:unified_ip_phone_7970g, cpe:/h:cisco:unified_ip_phone_7971g-ge, cpe:/h:cisco:unified_ip_phone_7975g
Required KB Items: Tenable.ot/Cisco
Exploit Ease: No known exploits are available
Patch Publication Date: 6/2/2011
Vulnerability Publication Date: 6/2/2011
Reference Information
CVE: CVE-2011-1603