CVE-2007-1062

no score yetEPSS 4.2%

The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2007-02-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:unified_ip_conference_station_7935_firmware
cisco:unified_ip_conference_station_firmware_7936

References

http://osvdb.org/45245
http://secunia.com/advisories/24262
http://securitytracker.com/id?1017680
http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml

Check your stack JSON