CVE-2007-1062

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/45245Broken Link
http://secunia.com/advisories/24262Vendor Advisory
http://securitytracker.com/id?1017680Third Party Advisory, VDB Entry
http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtmlVendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/22647Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0688Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32623VDB Entry
http://osvdb.org/45245Broken Link
http://secunia.com/advisories/24262Vendor Advisory
http://securitytracker.com/id?1017680Third Party Advisory, VDB Entry
http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtmlVendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/22647Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0688Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32623VDB Entry

Timeline

Published: Feb 22, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-106310.0The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-code CVE-2007-10646.8Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has CVE-2007-10656.8Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has CVE-2007-10666.8Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has CVE-2007-10677.2Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has CVE-2007-10687.2The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) F CVE-2007-10697.8The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service (Windows virtual machine crash) by tr CVE-2007-107010.0Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, CVE-2007-10717.8Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (se CVE-2007-10727.2The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier CVE-2007-107310.0Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor paramete CVE-2007-10749.3Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbitrary code via a long