Every CVESearch/Get API key

CVE-2002-0882

The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to...

6.4 Medium

The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.

Exploit likelihood

2.75%Up 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used6.4

The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.

Record
CVE-2002-0882
CVSS 2.0
6.4 MediumAV:N/AC:L/Au:N/C:P/I:N/A:P
Updated
2026-11-02
CVE ListNo score

The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.

Record
CVE-2002-0882
Updated
2026-11-02
EUVDEUVD-2002-0874No score

The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.

Record
EUVD-2002-0874
Updated
2026-11-03
GitHub AdvisoriesGHSA-h29j-vr6w-459rNo score

The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to...

The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.

Record
GHSA-h29j-vr6w-459r
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-0882 is a medium vulnerability (CVSS 6.4) in Cisco Skinny Client Control Protocol Software, published August 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. No source names a fixed version.

References

MoveEnter Open