CVE-2015-0604 - Vulnerability Details - OpenCVE

The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00175.

Key SSVC decision points have not yet been added.

Vendors	Products
Cisco Subscribe	Unified Ip Phone 9951 Subscribe Unified Ip Phone 9971 Subscribe Unified Ip Phones 9951 Firmware Subscribe Unified Ip Phones 9971 Firmware Subscribe

Configuration 1 [-]

AND

cpe:2.3:o:cisco:unified_ip_phones_9971_firmware:9.4\(.1\):*:*:*:*:*:*:*

cpe:2.3:h:cisco:unified_ip_phone_9971:*:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:cisco:unified_ip_phones_9951_firmware:9.4\(.1\):*:*:*:*:*:*:*

cpe:2.3:h:cisco:unified_ip_phone_9951:*:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2015-0617	The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://secunia.com/advisories/62761
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0604
http://tools.cisco.com/security/center/viewAlert.x?alertId=37346
http://www.securityfocus.com/bid/72485
https://exchange.xforce.ibmcloud.com/vulnerabilities/100620

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2015-02-07T02:00:00

Updated: 2024-08-06T04:17:32.574Z

Reserved: 2015-01-07T00:00:00

Link: CVE-2015-0604

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2015-02-07T04:59:07.797

Modified: 2025-04-12T10:46:40.837

Link: CVE-2015-0604

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-20

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-02-03T00:00:00", "descriptions": [{"lang": "en", "value": "The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-07T15:57:01", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "cisco-unifiedipphone-cve20150604-file-upload(100620)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100620"}, {"name": "20150203 Cisco Unified IP Phone 9900 Series Arbitrary File Upload Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0604"}, {"name": "62761", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/62761"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37346"}, {"name": "72485", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/72485"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2015-0604", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "cisco-unifiedipphone-cve20150604-file-upload(100620)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100620"}, {"name": "20150203 Cisco Unified IP Phone 9900 Series Arbitrary File Upload Vulnerability", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0604"}, {"name": "62761", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/62761"}, {"name": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37346", "refsource": "CONFIRM", "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37346"}, {"name": "72485", "refsource": "BID", "url": "http://www.securityfocus.com/bid/72485"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T04:17:32.574Z"}, "title": "CVE Program Container", "references": [{"name": "cisco-unifiedipphone-cve20150604-file-upload(100620)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100620"}, {"name": "20150203 Cisco Unified IP Phone 9900 Series Arbitrary File Upload Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0604"}, {"name": "62761", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/62761"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37346"}, {"name": "72485", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/72485"}]}]}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2015-0604", "datePublished": "2015-02-07T02:00:00", "dateReserved": "2015-01-07T00:00:00", "dateUpdated": "2024-08-06T04:17:32.574Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:unified_ip_phones_9971_firmware:9.4\\(.1\\):*:*:*:*:*:*:*", "matchCriteriaId": "CB796460-F9AB-48C3-93F0-85791BA0E56D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:unified_ip_phone_9971:*:*:*:*:*:*:*:*", "matchCriteriaId": "0BE3EAE9-ED3B-4E53-ABCE-65A65BD2E7EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:unified_ip_phones_9951_firmware:9.4\\(.1\\):*:*:*:*:*:*:*", "matchCriteriaId": "635BC1A9-2325-480A-802B-1AF584EA2C3B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:unified_ip_phone_9951:*:*:*:*:*:*:*:*", "matchCriteriaId": "5577F66E-FCAD-4FE4-9E12-A824FD5B37E3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424."}, {"lang": "es", "value": "El Framework web en los tel\u00e9fonos Cisco Unified IP 9900 con firmware 9.4(.1) y anteriores permite a atacantes remotos subir ficheros a localizaciones arbitrarias al sistema de ficheros de un tel\u00e9fono a trav\u00e9s de solicitudes HTTP manipuladas, tambi\u00e9n conocido como Bug ID CSCup90424."}], "id": "CVE-2015-0604", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2015-02-07T04:59:07.797", "references": [{"source": "psirt@cisco.com", "url": "http://secunia.com/advisories/62761"}, {"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0604"}, {"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37346"}, {"source": "psirt@cisco.com", "url": "http://www.securityfocus.com/bid/72485"}, {"source": "psirt@cisco.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100620"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/62761"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0604"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37346"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/72485"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100620"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}