Cisco Unified Ip Phone 9951 — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Unified Ip Phone 9951, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2013-5526 — CVSS 7.1 (high): Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service…
• CVE-2013-6685 — CVSS 6.6 (medium): The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to…
• CVE-2013-5533 — CVSS 6.0 (medium): The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an…
• CVE-2014-0658 — CVSS 5.4 (medium): Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP header, aka Bug ID…
• CVE-2013-3426 — CVSS 5.0 (medium): The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files…
• CVE-2013-5532 — CVSS 5.0 (medium): Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service (webapp…