Vulnerabilities > Cisco > Unified IP Phone 8961

DATE CVE VULNERABILITY TITLE RISK
2013-11-13 CVE-2013-6685 Permissions, Privileges, and Access Controls vulnerability in Cisco products
The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.
local
cisco CWE-264
6.6