CVE:CVE-2013-6685
CNNVD:CNNVD-201311-202
Cisco Unified IP Phones 8961、9951和9971都是美国思科（Cisco）公司的IP电话终端设备。该设备提供语音、视频等功能。
Cisco Unified IP phones 8961，9951，9971中的固件存在安全漏洞，该漏洞源于程序对内存块设备使用弱权限。本地攻击者可通过安装带有恶意文件系统的设备利用该漏洞完全控制受影响设备。
solution:Upgrade cisco unified_ip_phone_firmware to a higher version than -; Upgrade cisco unified_ip_phone_8961 to a higher version than *; Upgrade cisco unified_ip_phone_9951 to a higher version than *; Upgrade cisco unified_ip_phone_9971 to a higher version than *