CVE-2011-1637 - CVE House
Back to Database
Status published Low CVE-2011-1637

Cisco Unified IP Phones 7900 devices (aka TNP phones) with...

Vulnerability Description

Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-1637

Credits & Attribution

No credits recorded in the NVD database.

References

More from cisco

View All →
CVE-2025-27091
OpenH264 Decoding Functions Heap Overflow Vulnerability
High 8.6
CVE-2023-25653
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
High 7.5
CVE-2021-33478
The TrustZone implementation in certain Broadcom MediaxChange firmware could allow...
Medium 6.8
CVE-2020-16139
A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0...
High 7.5
CVE-2020-16138
A denial-of-service issue in Cisco Unified IP Conference Station 7937G...
High 7.5

Affected Vendor

Affected Software

unified ip phone 7906, unified ip phone 7911g, unified ip phone 7931g, unified ip phone 7941g, unified ip phone 7941g-ge, unified ip phone 7942g, unified ip phone 7945g, unified ip phone 7961g, unified ip phone 7961g-ge, unified ip phone 7962g, unified ip phone 7965g, unified ip phone 7970g, unified ip phone 7971g-ge, unified ip phone 7975g, skinny client control protocol software
Vulnerable Versions:
0, 1.0\(1\), 1.0\(2\), 1.0\(3\), 1.0\(4\), 1.0\(5\), 1.0\(9\), 1.1\(1\), 1.2\(1\), 1.3\(1\), 1.3\(2\), 1.3\(3\), 1.3\(4\), 1.4\(1\), 1.4\(2\), 2.0\(0\), 2.0\(1\), 3.0, 3.0\(0\), 3.0\(1\), 3.0\(2\), 3.1, 3.1\(1\), 3.1\(2\), 3.1\(3\), 3.1\(4\), 3.1\(6\), 3.1\(10\), 3.1\(11\), 3.2, 3.2\(1\), 3.2\(2\), 3.2\(3\), 3.2\(4\), 3.2\(5\), 3.2\(6\), 3.2\(6a\), 3.2\(7\), 3.2\(8\), 3.2\(9\), 3.2\(10\), 3.2\(11\), 3.2\(12\), 3.2\(13\), 3.2\(14\), 3.2\(15\), 3.3\(2\), 3.3\(3\), 3.3\(4\), 3.3\(5\), 3.3\(6\), 3.3\(7\), 3.3\(8\), 3.3\(9\), 3.3\(10\), 3.3\(11\), 3.3\(12\), 3.3\(13\), 3.3\(14\), 3.3\(15\), 3.3\(16\), 3.3\(20\), 4.0\(0\), 4.1\(2\), 4.1\(3\), 4.1\(4\), 4.1\(5\), 4.1\(6\), 4.1\(7\), 5.0\(0\), 5.0\(1a\), 5.0\(3\), 5.0\(5\), 5.0\(6\), 5.0\(7\), 6.0\(0\), 6.0\(2\), 6.0\(3\), 6.0\(4\), 6.0\(5\), 6.1\(0\), 6.1\(1\), 7.0\(1\), 7.0\(2\), 7.0\(3\), 7.1\(2\), 7.2\(2\), 7.2\(3\), 7.2\(4\), 8.0\(1\), 8.0\(2\), 8.0\(3\), 8.0\(4\), 8.0\(5\), 8.0\(6\), 8.0\(7\), 8.0\(8\), 8.0\(9\), 8.0\(10\), 8.1\(1\), 8.1\(2\), 8.2\(1\), 8.2\(2\), 8.3\(1\), 8.3\(2\), 8.3\(3\), 8.3\(5\), 8.4\(1\), 8.4\(2\), 8.4\(3\), 8.4\(4\), 8.5\(2\), 8.5\(3\), 8.5\(4\), 8.70, 9.0\(2\), 9.0\(3\)

Timeline

Official Publish: June 2nd, 2011
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.