CVE-2007-1072: High severity Cisco Unified Ip Phone Firmware 7906g vulnerability

Published Feb 22, 2007
·
Updated

The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063.

Affected Software

12 affected components
Cisco Unified Ip Phone Firmware 7906g=8.0\(4\)-sr1
Cisco Unified IP Phone 7906G
Cisco Unified Ip Phone Firmware 7911g=8.0\(4\)-sr1
Cisco Unified Ip Phone 7911g
Cisco Unified Ip Phone Firmware 7941g=8.0\(4\)-sr1
Cisco Unified Ip Phone 7941g
Cisco Unified Ip Phone Firmware 7961g=8.0\(4\)-sr1
Cisco Unified Ip Phone 7961g
Cisco Unified Ip Phone Firmware 7970g=8.0\(4\)-sr1
Cisco Unified Ip Phone 7970g
Cisco Unified Ip Phone Firmware 7971g=8.0\(4\)-sr1
Cisco Unified Ip Phone 7971g

Event History

Feb 22, 2007
CVE Published
10:28 PM
Data Sourced
10:28 PM
DescriptionWeaknessAffected Software
Feb 23, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2007-1072?

CVE-2007-1072 is classified as a high-severity vulnerability due to its potential to escalate privileges or cause a denial of service.

2

How do I fix CVE-2007-1072?

To mitigate CVE-2007-1072, upgrade the firmware of affected Cisco Unified IP Phones to versions beyond 8.0(4)SR1.

3

Which Cisco Unified IP Phones are affected by CVE-2007-1072?

CVE-2007-1072 affects the Cisco Unified IP Phone models 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running firmware 8.0(4)SR1 or earlier.

4

Can CVE-2007-1072 be exploited remotely?

CVE-2007-1072 can potentially be leveraged remotely if combined with the vulnerability identified in CVE-2007-1063.

5

What are the potential impacts of CVE-2007-1072?

The impacts of CVE-2007-1072 include unauthorized privilege escalation and service disruptions on affected Cisco IP Phones.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203