Cisco Unified Ip Phone Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Unified Ip Phone Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2013-3468 — CVSS 7.8 (high): The Cisco Unified IP Phone 8945 with software 9.3(2) allows remote attackers to cause a denial of service (device hang) via a malformed PNG…
• CVE-2018-0332 — CVSS 7.5 (high): A vulnerability in the Session Initiation Protocol (SIP) ingress packet processing of Cisco Unified IP Phone software could allow an…
• CVE-2013-6685 — CVSS 6.6 (medium): The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to…
• CVE-2012-1328 — CVSS 4.6 (medium): Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an…