Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco IP Phone Duplicate Key Vulnerability
Vulnerability Description
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager (CUCM) is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could result in duplicated manufactured keys installed on multiple devices. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on the secure communication between the phone and the CUCM. A successful exploit could allow the attacker to impersonate another user's phone. This vulnerability cannot be addressed with software updates. There is a workaround that addresses this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
使用具有密码学弱点缺陷的PRNG
Vulnerability Title
Cisco Unified IP Phones 安全特征问题漏洞
Vulnerability Description
Cisco Unified IP Phones是美国思科（Cisco）公司的一系列IP电话机。 Cisco Unified IP Phones 存在安全特征问题漏洞，该漏洞源于在制造过程中未正确生成密钥导致在多个设备上安装重复的制造密钥。未经身份验证的远程攻击者利用该漏洞可能允许其模拟其他用户的电话。
CVSS Information
N/A
Vulnerability Type
N/A