CVE-2007-1062: Critical severity Cisco Unified Ip Conference Station 7935 Firmware vulnerability
The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1062?
CVE-2007-1062 is classified as a medium severity vulnerability.
How do I fix CVE-2007-1062?
To fix CVE-2007-1062, upgrade to a firmware version later than 3.2(15) for the 7935 model and later than 3.3(12) for the 7936 model.
What systems are affected by CVE-2007-1062?
CVE-2007-1062 affects Cisco Unified IP Conference Stations 7935 with firmware versions up to 3.2(15) and 7936 with firmware versions up to 3.3(12).
What is the nature of the vulnerability in CVE-2007-1062?
CVE-2007-1062 allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface.
Is there any workaround for CVE-2007-1062?
Currently, the recommended course of action for CVE-2007-1062 is to upgrade the affected devices, as there are no effective workarounds to mitigate the issue.