Summaryinfo

A vulnerability, which was classified as problematic, was found in Cisco Unified IP Phone. This impacts an unknown function of the component Certificate Trust List. Executing a manipulation can lead to improper authentication. This vulnerability is handled as CVE-2014-0737. There is not any exploit available. It is best practice to apply a patch to resolve this issue.

Detailsinfo

A vulnerability has been found in Cisco Unified IP Phone (IP Phone Software) (affected version not known) and classified as problematic. This vulnerability affects some unknown functionality of the component Certificate Trust List. The manipulation with an unknown input leads to a improper authentication vulnerability. The CWE definition for the vulnerability is CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. As an impact it is known to affect integrity. CVE summarizes:

The Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj66795.

The weakness was released 02/20/2014 with Cisco as CSCuj66795 as confirmed security notice (Website). The advisory is available at tools.cisco.com. This vulnerability was named CVE-2014-0737 since 01/02/2014. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. The technical details are unknown and an exploit is not available. The advisory points out:

An attacker could exploit this vulnerability by injecting a crafted CTL file to the phone. An exploit could allow the attacker to cause the phone to trust systems under the attacker's control.

Applying the patch CSCuj66795 is able to eliminate this problem. The bugfix is ready for download at tools.cisco.com. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the databases at X-Force (91288) and SecurityFocus (BID 65705†). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• IP Phone Software

Vendor

• Cisco

Name

• Unified IP Phone

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion