3.5

CVE-2007-6190

EPSS 0.36%
Veröffentlicht 30.11.2007 01:46:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an ExecuteItem element that specifies a Real-Time Transport Protocol (RTP) audio stream.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Unified Ip Phone

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.36%	0.554

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://osvdb.org/40874

http://secunia.com/advisories/27829

Vendor Advisory

http://securitytracker.com/id?1019006

http://www.cisco.com/en/US/products/products_security_response09186a0080903a6d.html

http://www.hack.lu/pres/hacklu07_Remote_wiretapping.pdf

http://www.securityfocus.com/bid/26668

http://www.vupen.com/english/advisories/2007/4036

https://nvd.nist.gov/vuln/detail/CVE-2007-6190

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-6190

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-6190

EUVD