The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382.
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6685