Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.0
CVE-2015-0602: Cisco 9900 phone firmware lets attackers capture network data
CVE-2015-0602 · published 11 years ago
Summary
The Cisco Unified IP 9900 phone firmware (version 9.4 and earlier) can be tricked to reveal sensitive information that travels over the network. This means a remote attacker could listen in and collect data such as passwords or private communications. Update the phone firmware to the latest version or apply Cisco's recommended patch to stop this listening capability.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | unified_ip_phones_9900_series_firmware |
<= 9.4\(.1\) cpe:2.3:o:cisco:unified_ip_phones_9900_series_firmware:*:*:*:*:*:*:*:* |
Original advisory text
The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117.
The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
5.0
Medium
Type
CWE-200Information Exposure
Timeline
Published7 Feb 2015
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2015-0602 · NVD
Track software like this
Free during beta