CVE-2007-1072
HIGH · CVSS 7.2EPSS 0.3%EU EUVD
The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063.
Key facts
- CVSS score
- 7.2 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:L/AC:L/Au:N/C:C/I:C/A:C- Weakness (CWE)
- CWE-264
- EPSS score
- 0.3% (28th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2007-1069)
- Published
- February 22, 2007
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2007-1069 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- cisco / unified ip phone 7906g
- cisco / unified ip phone 7911g
- cisco / unified ip phone 7941g
- cisco / unified ip phone 7961g
- cisco / unified ip phone 7970g
- cisco / unified ip phone 7971g
- cisco / unified ip phone firmware 7906g
- cisco / unified ip phone firmware 7911g
- cisco / unified ip phone firmware 7941g
- cisco / unified ip phone firmware 7961g
- cisco / unified ip phone firmware 7970g
- cisco / unified ip phone firmware 7971g
References
- http://osvdb.org/33064(Broken Link)
- http://secunia.com/advisories/24262(Vendor Advisory)
- http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml(Vendor Advisory)
- http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml(Patch, Vendor Advisory)
- http://www.securityfocus.com/bid/22647(Third Party Advisory, VDB Entry)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain