Privilege Escalation Vulnerability in Cisco Unified IP Phones 9900 Series (Firmware 9.1 and 9.2)

Privilege Escalation Vulnerability in Cisco Unified IP Phones 9900 Series (Firmware 9.1 and 9.2)

CVE-2012-1328 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.

Learn more about our User Device Pen Test.