CVE-2012-1328: Code Injection
Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1328?
CVE-2012-1328 has a medium severity rating due to its potential to allow privilege escalation on affected devices.
How do I fix CVE-2012-1328?
To fix CVE-2012-1328, upgrade the firmware of Cisco Unified IP Phones 9900 series to a version later than 9.2.
What devices are affected by CVE-2012-1328?
CVE-2012-1328 affects Cisco Unified IP Phones 9900 series devices running firmware versions 9.1 and 9.2.
Can local users exploit CVE-2012-1328?
Yes, local users can exploit CVE-2012-1328 to gain elevated privileges on affected Cisco IP phones.
Is CVE-2012-1328 related to configuration information?
Yes, CVE-2012-1328 involves improper handling of configuration information downloads to the RT phone.