Cisco IP Phone 8800 Series CVE-2017-12305 Local Command Injection Vulnerability
BID:101869
Info
Cisco IP Phone 8800 Series CVE-2017-12305 Local Command Injection Vulnerability
| Bugtraq ID: | 101869 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-12305 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 15 2017 12:00AM |
| Updated: | Dec 19 2017 10:00PM |
| Credit: | Cisco. |
| Vulnerable: |
Cisco IP Phone 8800 Series 0 |
| Not Vulnerable: | |
Discussion
Cisco IP Phone 8800 Series CVE-2017-12305 Local Command Injection Vulnerability
Cisco IP Phone 8800 Series are prone to a local command-injection vulnerability because it fails to properly sanitize user-supplied input.
An attacker may exploit this issue to inject and execute arbitrary commands within the context of the affected application; this may aid in further attacks. .
This issue is being tracked by Cisco bug ID CSCvf80034.
Cisco IP Phone 8800 Series are prone to a local command-injection vulnerability because it fails to properly sanitize user-supplied input.
An attacker may exploit this issue to inject and execute arbitrary commands within the context of the affected application; this may aid in further attacks. .
This issue is being tracked by Cisco bug ID CSCvf80034.
Exploit / POC
Cisco IP Phone 8800 Series CVE-2017-12305 Local Command Injection Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Cisco IP Phone 8800 Series CVE-2017-12305 Local Command Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.