Default Administrative Password Vulnerability in Cisco IP Phones

CVE-2002-0881

Summary

Cisco IP Phones, specifically models 7910, 7940, and 7960, are vulnerable due to the use of a default administrative password. This security flaw permits attackers with physical access to these devices to alter configuration settings, potentially compromising the integrity and security of the VoIP infrastructure. Organizations using these models should take immediate steps to change default passwords and enhance physical security to mitigate this risk.

References