CVE-2007-1062
N/A
Published: February 22, 2007 at 01:00 AM UTC
Updated: June 16, 2026 at 10:36 PM UTC
4 products affected across 1 vendorUnified IP Conference Station 7935 FirmwareUnified IP Conference Station Firmware 7936Unified Ip Conference Station 7936
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%
Description
The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 3.2(15)
cisco-unified-ip-conference-station-7935 (same device)
v ≤ 3.3(12)
cisco-unified-ip-conference-station-7936 (environment)
All versions
All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (8)
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/24262VDB Entryx_refsource_SECTRACKThird Party Advisory
Source: [email protected]
http://securitytracker.com/id?1017680Vendor Advisoryx_refsource_CISCO
Source: [email protected]
http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtmlVendor Advisoryx_refsource_CISCOPatch
Source: [email protected]
http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtmlVDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/22647VDB Entryx_refsource_VUPENVendor Advisory
Source: [email protected]
http://www.vupen.com/english/advisories/2007/0688VDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/32623Quick Info
StatusMODIFIED
CWE
CWE-287
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card