ID CVE-2002-0881
Summary Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings.
References
Vulnerable Configurations
  • cpe:2.3:h:cisco:voip_phone_cp-7940:3.0:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:voip_phone_cp-7940:3.0:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:voip_phone_cp-7940:3.1:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:voip_phone_cp-7940:3.1:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:voip_phone_cp-7940:3.2:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:voip_phone_cp-7940:3.2:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.0:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.0:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.1:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.1:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.2:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.2:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 30-10-2018 - 16:26)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:P/A:N
refmap via4
bid 4799
bugtraq 20020522 Multiple Vulnerabilities in CISCO VoIP Phones
cisco 20020522 Multiple Vulnerabilities in Cisco IP Telephones
xf cisco-ipphone-configuration-access(9144)
Last major update 30-10-2018 - 16:26
Published 04-10-2002 - 04:00
Last modified 30-10-2018 - 16:26
Back to Top