CVE-2007-1063

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device.

• CWE-798

• http://osvdb.org/45246Broken Link
• http://secunia.com/advisories/24262Vendor Advisory
• http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtmlVendor Advisory
• http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/22647Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1017681Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/0689Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32627Third Party Advisory, VDB Entry
• http://osvdb.org/45246Broken Link
• http://secunia.com/advisories/24262Vendor Advisory
• http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtmlVendor Advisory
• http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/22647Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1017681Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/0689Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32627Third Party Advisory, VDB Entry

Published

Feb 22, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1057The Net Direct client for Linux before 6.0.5 in Nortel Appli…
• CVE-2007-1058SQL injection vulnerability in user_pages/page.asp in Online…
• CVE-2007-1059PHP remote file inclusion vulnerability in function.php in U…
• CVE-2007-1060Multiple PHP remote file inclusion vulnerabilities in Inters…
• CVE-2007-1061SQL injection vulnerability in index.php in Francisco Burzi …
• CVE-2007-1062The Cisco Unified IP Conference Station 7935 3.2(15) and ear…
• CVE-2007-1064Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and…
• CVE-2007-1065Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and…
• CVE-2007-1066Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and…
• CVE-2007-1067Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and…
• CVE-2007-1068The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) T…
• CVE-2007-1069The memory management in VMware Workstation before 5.5.4 all…