CVE-2013-6685: Medium severity Cisco Unified Ip Phone Firmware vulnerability
Published Nov 13, 2013
·Updated
The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.
Affected Software
8 affected components
Cisco Unified Ip Phone Firmware
Cisco Unified Ip Phone 8961
Cisco Unified Ip Phone 9951
Cisco Unified Ip Phone 9971
All of the following
Cisco Unified Ip Phone Firmware
Any of the following
Cisco Unified Ip Phone 8961
Cisco Unified Ip Phone 9951
Cisco Unified Ip Phone 9971
Event History
Nov 13, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6685?
CVE-2013-6685 has a medium severity rating due to its potential to allow local privilege escalation.
2
How do I fix CVE-2013-6685?
To fix CVE-2013-6685, update to the latest firmware version provided by Cisco for the affected IP phone models.
3
Which devices are affected by CVE-2013-6685?
CVE-2013-6685 affects the Cisco Unified IP phones models 8961, 9951, and 9971.
4
What kind of vulnerability is CVE-2013-6685?
CVE-2013-6685 is a local privilege escalation vulnerability caused by weak permissions on memory block devices.
5
Is remote access required to exploit CVE-2013-6685?
No, only local access is required to exploit CVE-2013-6685.