CVE-2012-5445
Medium
Description
The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a crafted binary.
SeverityMedium
CVSS6.8
Exploit probability—
Product
Cisco Unified Ip Phone
PublishedDec 28, 2012
First seenDec 28, 2012
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified_ip_phone | 7906g, 7911g, 7935, 7936, 7940, 7940g, 7941g, 7960, 7960g, 7961g, 7970g, 7971g | — |
| cisco skinny_client_control_protocol_software | v ≤ 9.2\(4\), 1.0\(1\), 1.0\(2\), 1.0\(3\), 1.0\(4\), 1.0\(5\), 1.0\(9\), 1.1\(1\), 1.2\(1\), 1.3\(1\), 1.3\(2\), 1.3\(3\), 1.3\(4\), 1.4\(1\), 1.4\(2\), 2.0\(0\), 2.0\(1\), 3.0, 3.0\(0\), 3.0\(1\), 3.0\(2\), 3.1, 3.1\(1\), 3.1\(2\), 3.1\(3\), 3.1\(4\), 3.1\(6\), 3.1\(10\), 3.1\(11\), 3.2, 3.2\(1\), 3.2\(2\), 3.2\(3\), 3.2\(4\), 3.2\(5\), 3.2\(6\), 3.2\(6a\), 3.2\(7\), 3.2\(8\), 3.2\(9\), 3.2\(10\), 3.2\(11\), 3.2\(12\), 3.2\(13\), 3.2\(14\), 3.2\(15\), 3.3\(2\), 3.3\(3\), 3.3\(4\), 3.3\(5\), 3.3\(6\), 3.3\(7\), 3.3\(8\), 3.3\(9\), 3.3\(10\), 3.3\(11\), 3.3\(12\), 3.3\(13\), 3.3\(14\), 3.3\(15\), 3.3\(16\), 3.3\(20\), 4.0\(0\), 4.1\(2\), 4.1\(3\), 4.1\(4\), 4.1\(5\), 4.1\(6\), 4.1\(7\), 5.0\(0\), 5.0\(1a\), 5.0\(3\), 5.0\(5\), 5.0\(6\), 5.0\(7\), 6.0\(0\), 6.0\(2\), 6.0\(3\), 6.0\(4\), 6.0\(5\), 6.1\(0\), 6.1\(1\), 7.0\(1\), 7.0\(2\), 7.0\(3\), 7.1\(2\), 7.2\(2\), 7.2\(3\), 7.2\(4\), 8.0\(1\), 8.0\(2\), 8.0\(3\), 8.0\(4\), 8.0\(5\), 8.0\(6\), 8.0\(7\), 8.0\(8\), 8.0\(9\), 8.0\(10\), 8.1\(1\), 8.1\(2\), 8.2\(1\), 8.2\(2\), 8.3\(1\), 8.3\(2\), 8.3\(3\), 8.3\(5\), 8.4\(1\), 8.4\(2\), 8.4\(3\), 8.4\(4\), 8.5\(2\), 8.5\(3\), 8.5\(4\), 8.70, 9.0\(2\), 9.0\(3\), 9.0\(3b\), 9.1\(1\), 9.2\(1\), 9.2\(2\) | — |
| cisco unified_ip_phone_7906g | 7911g, 7941g, 7961g, 7970g, 7971g | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.