Remote Access Vulnerability in Cisco Unified IP Phones

CVE-2007-1063

Summary

A vulnerability exists in the SSH server of Cisco Unified IP Phones where hard-coded username and password settings allow remote attackers to gain unauthorized access to the device. This security flaw affects models including the 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G with firmware versions 8.0(4)SR1 and earlier. Attackers exploiting this flaw can manipulate settings or access sensitive information, posing significant risks to network security.

References