CVE:CVE-2012-1328
CNNVD:CNNVD-201205-076
Cisco Unified IP Phones 9900系列设备固件9.1版本和9.2版本中存在漏洞，该漏洞源于未正确处理到RT电话的配置信息的下载。本地用户可利用该漏洞借助未明注入数据获取权限，又名Bug ID CSCts32237.
solution:Upgrade cisco unified_ip_phone to a higher version than 9900,and avoid the version 9900; Upgrade cisco unified_ip_phone_firmware to a higher version than 9.1,9.2,and avoid the version 9.1,9.2