CVE-2012-5445: Input Validation
Published Dec 28, 2012
·Updated
The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a crafted binary.
Affected Software
156 affected components
Cisco Skinny Client Control Protocol Software<=9.2\(4\)
Cisco Skinny Client Control Protocol Software=1.0\(1\)
Cisco Skinny Client Control Protocol Software=1.0\(2\)
Cisco Skinny Client Control Protocol Software=1.0\(2\)-sr1
Cisco Skinny Client Control Protocol Software=1.0\(3\)
Cisco Skinny Client Control Protocol Software=1.0\(4\)
Cisco Skinny Client Control Protocol Software=1.0\(5\)
Cisco Skinny Client Control Protocol Software=1.0\(9\)
Cisco Skinny Client Control Protocol Software=1.1\(1\)
Cisco Skinny Client Control Protocol Software=1.2\(1\)
Cisco Skinny Client Control Protocol Software=1.3\(1\)
Cisco Skinny Client Control Protocol Software=1.3\(2\)
Cisco Skinny Client Control Protocol Software=1.3\(3\)
Cisco Skinny Client Control Protocol Software=1.3\(4\)
Cisco Skinny Client Control Protocol Software=1.3\(4\)-sr1
Cisco Skinny Client Control Protocol Software=1.4\(1\)
Cisco Skinny Client Control Protocol Software=1.4\(2\)
Cisco Skinny Client Control Protocol Software=2.0\(0\)
Cisco Skinny Client Control Protocol Software=2.0\(1\)
Cisco Skinny Client Control Protocol Software=3.0
Cisco Skinny Client Control Protocol Software=3.0\(0\)
Cisco Skinny Client Control Protocol Software=3.0\(1\)
Cisco Skinny Client Control Protocol Software=3.0\(2\)
Cisco Skinny Client Control Protocol Software=3.1
Cisco Skinny Client Control Protocol Software=3.1\(1\)
Cisco Skinny Client Control Protocol Software=3.1\(2\)
Cisco Skinny Client Control Protocol Software=3.1\(3\)
Cisco Skinny Client Control Protocol Software=3.1\(4\)
Cisco Skinny Client Control Protocol Software=3.1\(6\)
Cisco Skinny Client Control Protocol Software=3.1\(10\)
Cisco Skinny Client Control Protocol Software=3.1\(11\)
Cisco Skinny Client Control Protocol Software=3.2
Cisco Skinny Client Control Protocol Software=3.2\(1\)
Cisco Skinny Client Control Protocol Software=3.2\(2\)
Cisco Skinny Client Control Protocol Software=3.2\(3\)
Cisco Skinny Client Control Protocol Software=3.2\(4\)
Cisco Skinny Client Control Protocol Software=3.2\(5\)
Cisco Skinny Client Control Protocol Software=3.2\(6\)
Cisco Skinny Client Control Protocol Software=3.2\(6a\)
Cisco Skinny Client Control Protocol Software=3.2\(7\)
Cisco Skinny Client Control Protocol Software=3.2\(8\)
Cisco Skinny Client Control Protocol Software=3.2\(9\)
Cisco Skinny Client Control Protocol Software=3.2\(10\)
Cisco Skinny Client Control Protocol Software=3.2\(11\)
Cisco Skinny Client Control Protocol Software=3.2\(12\)
Cisco Skinny Client Control Protocol Software=3.2\(13\)
Cisco Skinny Client Control Protocol Software=3.2\(14\)
Cisco Skinny Client Control Protocol Software=3.2\(15\)
Cisco Skinny Client Control Protocol Software=3.3\(2\)
Cisco Skinny Client Control Protocol Software=3.3\(3\)
Cisco Skinny Client Control Protocol Software=3.3\(4\)
Cisco Skinny Client Control Protocol Software=3.3\(5\)
Cisco Skinny Client Control Protocol Software=3.3\(6\)
Cisco Skinny Client Control Protocol Software=3.3\(7\)
Cisco Skinny Client Control Protocol Software=3.3\(8\)
Cisco Skinny Client Control Protocol Software=3.3\(9\)
Cisco Skinny Client Control Protocol Software=3.3\(10\)
Cisco Skinny Client Control Protocol Software=3.3\(11\)
Cisco Skinny Client Control Protocol Software=3.3\(12\)
Cisco Skinny Client Control Protocol Software=3.3\(13\)
Cisco Skinny Client Control Protocol Software=3.3\(14\)
Cisco Skinny Client Control Protocol Software=3.3\(15\)
Cisco Skinny Client Control Protocol Software=3.3\(16\)
Cisco Skinny Client Control Protocol Software=3.3\(20\)
Cisco Skinny Client Control Protocol Software=4.0\(0\)
Cisco Skinny Client Control Protocol Software=4.1\(2\)
Cisco Skinny Client Control Protocol Software=4.1\(3\)
Cisco Skinny Client Control Protocol Software=4.1\(4\)
Cisco Skinny Client Control Protocol Software=4.1\(5\)
Cisco Skinny Client Control Protocol Software=4.1\(6\)
Cisco Skinny Client Control Protocol Software=4.1\(7\)
Cisco Skinny Client Control Protocol Software=5.0\(0\)
Cisco Skinny Client Control Protocol Software=5.0\(1a\)
Cisco Skinny Client Control Protocol Software=5.0\(3\)
Cisco Skinny Client Control Protocol Software=5.0\(5\)
Cisco Skinny Client Control Protocol Software=5.0\(6\)
Cisco Skinny Client Control Protocol Software=5.0\(7\)
Cisco Skinny Client Control Protocol Software=6.0\(0\)
Cisco Skinny Client Control Protocol Software=6.0\(2\)-sr2
Cisco Skinny Client Control Protocol Software=6.0\(3\)
Cisco Skinny Client Control Protocol Software=6.0\(3\)-sr1
Cisco Skinny Client Control Protocol Software=6.0\(4\)
Cisco Skinny Client Control Protocol Software=6.0\(5\)
Cisco Skinny Client Control Protocol Software=6.1\(0\)
Cisco Skinny Client Control Protocol Software=6.1\(1\)
Cisco Skinny Client Control Protocol Software=7.0\(1\)
Cisco Skinny Client Control Protocol Software=7.0\(2\)
Cisco Skinny Client Control Protocol Software=7.0\(2\)-sr1
Cisco Skinny Client Control Protocol Software=7.0\(3\)
Cisco Skinny Client Control Protocol Software=7.1\(2\)
Cisco Skinny Client Control Protocol Software=7.2\(2\)
Cisco Skinny Client Control Protocol Software=7.2\(3\)
Cisco Skinny Client Control Protocol Software=7.2\(4\)
Cisco Skinny Client Control Protocol Software=8.0\(1\)
Cisco Skinny Client Control Protocol Software=8.0\(2\)
Cisco Skinny Client Control Protocol Software=8.0\(3\)
Cisco Skinny Client Control Protocol Software=8.0\(4\)
Cisco Skinny Client Control Protocol Software=8.0\(4\)-sr1
Cisco Skinny Client Control Protocol Software=8.0\(4\)-sr3a
Cisco Skinny Client Control Protocol Software=8.0\(5\)
Cisco Skinny Client Control Protocol Software=8.0\(6\)
Cisco Skinny Client Control Protocol Software=8.0\(7\)
Cisco Skinny Client Control Protocol Software=8.0\(8\)
Cisco Skinny Client Control Protocol Software=8.0\(9\)
Cisco Skinny Client Control Protocol Software=8.0\(10\)
Cisco Skinny Client Control Protocol Software=8.1\(1\)
Cisco Skinny Client Control Protocol Software=8.1\(2\)
Cisco Skinny Client Control Protocol Software=8.2\(1\)
Cisco Skinny Client Control Protocol Software=8.2\(2\)-sr1
Cisco Skinny Client Control Protocol Software=8.2\(2\)-sr2
Cisco Skinny Client Control Protocol Software=8.2\(2\)-sr3
Cisco Skinny Client Control Protocol Software=8.2\(2\)-sr4
Cisco Skinny Client Control Protocol Software=8.3\(1\)
Cisco Skinny Client Control Protocol Software=8.3\(2\)
Cisco Skinny Client Control Protocol Software=8.3\(2\)-sr1
Cisco Skinny Client Control Protocol Software=8.3\(3\)
Cisco Skinny Client Control Protocol Software=8.3\(3\)-sr1
Cisco Skinny Client Control Protocol Software=8.3\(3\)-sr2
Cisco Skinny Client Control Protocol Software=8.3\(5\)
Cisco Skinny Client Control Protocol Software=8.4\(1\)
Cisco Skinny Client Control Protocol Software=8.4\(1\)-sr2
Cisco Skinny Client Control Protocol Software=8.4\(2\)
Cisco Skinny Client Control Protocol Software=8.4\(3\)
Cisco Skinny Client Control Protocol Software=8.4\(4\)
Cisco Skinny Client Control Protocol Software=8.5\(2\)
Cisco Skinny Client Control Protocol Software=8.5\(2\)-sr1
Cisco Skinny Client Control Protocol Software=8.5\(3\)
Cisco Skinny Client Control Protocol Software=8.5\(3\)-sr1
Cisco Skinny Client Control Protocol Software=8.5\(4\)
Cisco Skinny Client Control Protocol Software=8.70
Cisco Skinny Client Control Protocol Software=9.0\(2\)-sr1
Cisco Skinny Client Control Protocol Software=9.0\(2\)-sr2
Cisco Skinny Client Control Protocol Software=9.0\(3\)
Cisco Skinny Client Control Protocol Software=9.0\(3b\)
Cisco Skinny Client Control Protocol Software=9.1\(1\)
Cisco Skinny Client Control Protocol Software=9.1\(1\)-sr1
Cisco Skinny Client Control Protocol Software=9.1\(1\)-sr2
Cisco Skinny Client Control Protocol Software=9.2\(1\)
Cisco Skinny Client Control Protocol Software=9.2\(2\)
Cisco Unified IP Phone=7906g
Cisco Unified IP Phone=7911g
Cisco Unified IP Phone=7935
Cisco Unified IP Phone=7936
Cisco Unified IP Phone=7940
Cisco Unified IP Phone=7940g
Cisco Unified IP Phone=7941g
Cisco Unified IP Phone=7960
Cisco Unified IP Phone=7960g
Cisco Unified IP Phone=7961g
Cisco Unified IP Phone=7970g
Cisco Unified IP Phone=7971g
Cisco Unified IP Phone 7906G=7911g
Cisco Unified IP Phone 7906G=7941g
Cisco Unified IP Phone 7906G=7961g
Cisco Unified IP Phone 7906G=7970g
Cisco Unified IP Phone 7906G=7971g
Event History
Dec 28, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5445?
The severity of CVE-2012-5445 is rated as critical due to its potential for arbitrary code execution and denial of service.
2
How do I fix CVE-2012-5445?
To fix CVE-2012-5445, upgrade the Cisco Unified IP Phone firmware to a version later than 9.3.1-ES10.
3
What products are affected by CVE-2012-5445?
CVE-2012-5445 affects Cisco Unified IP Phone 7900 series devices and specific versions of Cisco Skinny Client Control Protocol software.
4
What type of vulnerability is CVE-2012-5445?
CVE-2012-5445 is a vulnerability in the kernel that occurs due to improper validation of system calls.
5
Can CVE-2012-5445 lead to data breaches?
Yes, CVE-2012-5445 can potentially lead to data breaches through unauthorized access and execution of arbitrary code.