CVE-2007-1063

CVE Database · CVE-2007-1063

CVE-2007-1063

· N/AModified

CVSS v3.1

N/A

EPSS

3.33%

Published

Feb 21, 2007

Modified

Apr 22, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device.

Weaknesses (CWE)

CWE-798

Affected Products (12)

cisco · unified_ip_phone_firmware_7906gvulnerable

cisco · unified_ip_phone_7906g

cisco · unified_ip_phone_firmware_7911gvulnerable

cisco · unified_ip_phone_7911g

cisco · unified_ip_phone_firmware_7941gvulnerable

cisco · unified_ip_phone_7941g

cisco · unified_ip_phone_firmware_7961gvulnerable

cisco · unified_ip_phone_7961g

cisco · unified_ip_phone_firmware_7970gvulnerable

cisco · unified_ip_phone_7970g

cisco · unified_ip_phone_firmware_7971gvulnerable

References (16)

http://osvdb.org/45246

Broken Link

http://secunia.com/advisories/24262

Vendor Advisory

http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml

Vendor Advisory

http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml

PatchVendor Advisory

http://www.securityfocus.com/bid/22647

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1017681

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs