{"vulnerability": "CVE-2020-16137", "sightings": [{"uuid": "058964b0-6513-443a-a1e3-6989cb958196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16137", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "7b1697b6-5893-490f-a6f2-dd406784d9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16137", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:25.000000Z"}, {"uuid": "24cb1732-b96f-40b3-9b18-ed93cada6adf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16137", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/cisco_7937g_ssh_privesc.py", "content": "", "creation_timestamp": "2020-08-21T20:15:17.000000Z"}, {"uuid": "aa813ed9-88f6-42eb-8ef1-53c0be8aa6c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16137", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1569", "content": "Cisco Unified IP Conference Station\u00a0CP-7937G\n(versions SIP-1-4-5-7 and below):\n1. Two denial of service exploits (CVE-2020-16138/16139)\nhttps://packetstormsecurity.com/files/158819/cisco7937g-dos.txt\n2. Privilege escalation exploit (CVE-2020-16137)\nhttps://packetstormsecurity.com/files/158818/CVE-2020-16137.py.txt\nAll-In-One Tool:\nhttps://packetstormsecurity.com/files/158817/Cisco-7937G.py.txt", "creation_timestamp": "2020-08-11T11:07:01.000000Z"}, {"uuid": "506eb317-8600-444b-8e39-c452ecab7e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16137", "type": "seen", "source": "https://t.me/cissp/1071", "content": "Cisco Unified IP Conference Station\u00a0\u270c\ud83c\udffc\n(versions SIP-1-4-5-7 and below):\nTwo denial of service exploits (CVE-2020-16138/16139)\nhttps://packetstormsecurity.com/files/158819/cisco7937g-dos.txt\n\nPrivilege escalation exploit (CVE-2020-16137)\nhttps://packetstormsecurity.com/files/158818/CVE-2020-16137.py.txt\n\nAll-In-One Tool:\nhttps://packetstormsecurity.com/files/158817/Cisco-7937G.py.txt", "creation_timestamp": "2026-09-01T17:01:14.799511Z"}, {"uuid": "6b9a0f7f-61fd-4841-9a95-2ba302bac698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16137", "type": "seen", "source": "https://t.me/cissp/1071", "content": "Cisco Unified IP Conference Station\u00a0\u270c\ud83c\udffc\n(versions SIP-1-4-5-7 and below):\nTwo denial of service exploits (CVE-2020-16138/16139)\nhttps://packetstormsecurity.com/files/158819/cisco7937g-dos.txt\n\nPrivilege escalation exploit (CVE-2020-16137)\nhttps://packetstormsecurity.com/files/158818/CVE-2020-16137.py.txt\n\nAll-In-One Tool:\nhttps://packetstormsecurity.com/files/158817/Cisco-7937G.py.txt", "creation_timestamp": "2026-09-02T01:05:03.977390Z"}, {"uuid": "7b17119f-8425-41e4-bbd0-5e572debf053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16137", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/cisco_7937g_ssh_privesc.py", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Cody Martin\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a feature that should not be available \\n\\tvia the web interface. An unauthenticated user may change \\n\\tthe credentials for SSH access to any username and password \\n\\tcombination desired, giving access to administrative \\n\\tfunctions through an SSH connection.\", \"disclosure_date\": \"2020-06-02\", \"fullname\": \"auxiliary/admin/http/cisco_7937g_ssh_privesc\", \"is_install_path\": true, \"mod_time\": \"2022-01-23 15:28:32 +0000\", \"name\": \"Cisco 7937G SSH Privilege Escalation\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/admin/http/cisco_7937g_ssh_privesc.py\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/http/cisco_7937g_ssh_privesc\", \"references\": [\"URL-https://web.archive.org/web/20200921054955/https://www.blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/\", \"CVE-2020-16137\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:44.091294Z"}, {"uuid": "8eb6e752-1f5b-4ebf-9352-1cd6423b75f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16137", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1071", "content": "Cisco Unified IP Conference Station\u00a0\u270c\ud83c\udffc\n(versions SIP-1-4-5-7 and below):\nTwo denial of service exploits (CVE-2020-16138/16139)\nhttps://packetstormsecurity.com/files/158819/cisco7937g-dos.txt\n\nPrivilege escalation exploit (CVE-2020-16137)\nhttps://packetstormsecurity.com/files/158818/CVE-2020-16137.py.txt\n\nAll-In-One Tool:\nhttps://packetstormsecurity.com/files/158817/Cisco-7937G.py.txt", "creation_timestamp": "2026-09-12T02:00:04.874265Z"}, {"uuid": "4eda71bf-a5f7-43d9-9772-fdee91bfcdff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16137", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1071", "content": "Cisco Unified IP Conference Station\u00a0\u270c\ud83c\udffc\n(versions SIP-1-4-5-7 and below):\nTwo denial of service exploits (CVE-2020-16138/16139)\nhttps://packetstormsecurity.com/files/158819/cisco7937g-dos.txt\n\nPrivilege escalation exploit (CVE-2020-16137)\nhttps://packetstormsecurity.com/files/158818/CVE-2020-16137.py.txt\n\nAll-In-One Tool:\nhttps://packetstormsecurity.com/files/158817/Cisco-7937G.py.txt", "creation_timestamp": "2026-09-13T00:01:00.024037Z"}]}