NVD

Id
41599  
Name
CVE-2013-6685  
Description
The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.  
Reject
 
CVSS Version
2  
CVSS Score
6.6  
Severity
Medium  
CVSS Base Score
6.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
2.7  
CVSS Vector
(AV:L/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-11-13  
Modified Date
2013-11-14  
Seq
2013-6685  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210521 41599 CVE-2013-6685 20131112 Cisco Unified IP Phone 8900/9900 Series Insecure File Permissions Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23536 JVNDB-2013-005111 Cisco Unified IP phones のファームウェアにおける権限を取得される脆弱性 Cisco Unified IP phones のファームウェアは、メモリブロックデバイスに脆弱なパーミッションを使用するため、権限を取得される脆弱性が存在します。 CVE-2013-6685 66627 CVE-2013-6685 41599 6.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005111.html 2013-11-13 2013-11-15 View