CVE-2007-1072

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-22 · updated 2026-06-16
Weakness: CWE-264

Description

The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063.

Affected products

Cisco Unified Ip Phone Firmware 7906G: 8.0(4)-sr1
Cisco Unified Ip Phone Firmware 7911G: 8.0(4)-sr1
Cisco Unified Ip Phone Firmware 7941G: 8.0(4)-sr1
Cisco Unified Ip Phone Firmware 7961G: 8.0(4)-sr1
Cisco Unified Ip Phone Firmware 7970G: 8.0(4)-sr1
Cisco Unified Ip Phone Firmware 7971G: 8.0(4)-sr1

References

http://osvdb.org/33064
http://secunia.com/advisories/24262
http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml
http://www.securityfocus.com/bid/22647
http://osvdb.org/33064
http://secunia.com/advisories/24262
http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml
http://www.securityfocus.com/bid/22647

Get alerted when CVE-2007-1072 or the next vulnerability affects your stack