CVE-2002-0882
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to...
CVE-2002-0882 is a medium vulnerability (CVSS 6.4) in Cisco Skinny Client Control Protocol Software, published August 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. No source names a fixed version.
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
Exploit likelihood
What each source reports
NVD Score used
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
- Record
CVE-2002-0882- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
- Record
CVE-2002-0882- Updated
- 2026-11-02
EUVDEUVD-2002-0874 No score
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
- Record
EUVD-2002-0874- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h29j-vr6w-459r No score
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to...
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
- Record
GHSA-h29j-vr6w-459r- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
online.securityfocus.com/archive/1/273673
securityfocus.com/bid/4794
cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml
iss.net/security_center/static/9142.php
nvd.nist.gov/vuln/detail/CVE-2002-0882
github.com/advisories/GHSA-h29j-vr6w-459r