CVE-2002-0882
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to...
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
Exploit likelihood
What each source reports
NVD Score used 6.4
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
- Record
CVE-2002-0882- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
- Record
CVE-2002-0882- Updated
- 2026-11-02
EUVDEUVD-2002-0874No score
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
- Record
EUVD-2002-0874- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h29j-vr6w-459rNo score
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to...
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
- Record
GHSA-h29j-vr6w-459r- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0882 is a medium vulnerability (CVSS 6.4) in Cisco Skinny Client Control Protocol Software, published August 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. No source names a fixed version.
References
online.securityfocus.com/archive/1/273673
securityfocus.com/bid/4794
cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml
securityfocus.com/bid/4798
iss.net/security_center/static/9142.php
iss.net/security_center/static/9143.php
nvd.nist.gov/vuln/detail/CVE-2002-0882
github.com/advisories/GHSA-h29j-vr6w-459r