CVSS: 10.0EPSS: 2%CPEs: 12EXPL: 0CVE-2007-1063
https://notcve.org/view.php?id=CVE-2007-1063
22 Feb 2007 — The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device. El servidor SSH en Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, y 7971G, con firmware 8.0(4)SR1 y anteriores, utiliza un nombre de usuario y contraseña fuertemente codificada, lo cual permite a atacantes remotos acceder al dispositivo. • http://osvdb.org/45246 • CWE-798: Use of Hard-coded Credentials •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2005-3803
https://notcve.org/view.php?id=CVE-2005-3803
24 Nov 2005 — Cisco IP Phone (VoIP) 7920 1.0(8) contains certain hard-coded ("fixed") public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information. Cisco IP Phone (VoIP) 7920 1.0(8) contiene ciertas cadenas de comunidad SNMP fijas que no pueden ser cambiadas, lo que permite a atacantes remotos obtener información sensible. • http://secunia.com/advisories/17604 • CWE-798: Use of Hard-coded Credentials •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2005-2181
https://notcve.org/view.php?id=CVE-2005-2181
10 Jul 2005 — Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message. • http://marc.info/?l=bugtraq&m=112067698624686&w=2 • CWE-347: Improper Verification of Cryptographic Signature •