VULNERABILITY INTELLIGENCE

CVE-2007-1063

CVSS score10 HIGH
EPSS probability3.38%
CISA KEVNot currently listed
Published2007-02-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device.

Weakness classification

  • CWE-798: Use of Hard-coded Credentials

Primary references