CVE-2007-1063

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-798

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/45246Broken Link
http://secunia.com/advisories/24262Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtmlVendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/22647Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1017681Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0689Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32627Third Party Advisory, VDB Entry
http://osvdb.org/45246Broken Link
http://secunia.com/advisories/24262Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtmlVendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/22647Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1017681Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0689Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32627Third Party Advisory, VDB Entry

Timeline

Published: Feb 22, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-10646.8Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has CVE-2007-10656.8Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has CVE-2007-10666.8Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has CVE-2007-10677.2Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has CVE-2007-10687.2The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) F CVE-2007-10697.8The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service (Windows virtual machine crash) by tr CVE-2007-107010.0Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, CVE-2007-10717.8Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (se CVE-2007-10727.2The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier CVE-2007-107310.0Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor paramete CVE-2007-10749.3Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbitrary code via a long CVE-2007-10757.8TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large number of newline c