The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to…
Priority LOW 27CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.
Why it matters now
EPSS 0.00274 19th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:cisco:unified_ip_phones_9900_series_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone_9951:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:h:cisco:unified_ip_phone_9971:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
- cpe:2.3:o:cisco:unified_ip_phones_9900_series_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone_9951:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:h:cisco:unified_ip_phone_9971:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2013-5533
- 2026-10-03 Alias added: GHSA-822w-g3w7-5625
References
More Cisco Unified Ip Phone 9951 vulnerabilities
- TI-2013-04719 Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which… CVSS 2.0HIGH 7.1
- TI-2014-00628 Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service… CVSS 2.0MEDIUM 5.4
- TI-2013-05504 The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for… CVSS 2.0MEDIUM 6.6
- TI-2013-04725 Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote… CVSS 2.0MEDIUM 5.0
- TI-2013-02993 The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2013-5533 · CVE Program
- CVE-2013-5533 · NVD
- FIRST EPSS
- GHSA-822w-g3w7-5625 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences