VULNERABILITY INTELLIGENCE
CVE-2012-5445
CVSS score6.8 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2012-12-28
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:S/C:C/I:C/A:C
Description
The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a crafted binary.
Weakness classification
- CWE-20: Improper Input Validation