CVE-2013-6685

EPSS 0.06%
Published 13.11.2013 15:55:04
Last modified 11.04.2025 00:51:21
Source psirt@cisco.com
Teams watchlist Login
Open Login

The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.

Affected products Warnungen 0 Metrics 2 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Unified Ip Phone Firmware Version-

Cisco ≫ Unified Ip Phone 8961

Cisco ≫ Unified Ip Phone 9951

Cisco ≫ Unified Ip Phone 9971

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.159

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.6	2.7	10	AV:L/AC:M/Au:S/C:C/I:C/A:C

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6685

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-6685

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-6685

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-6685

EUVD