Cisco IP Phone 8800 Series CVE-2019-1765 Path Traversal Arbitrary File Write Vulnerability
BID:107500
Info
Cisco IP Phone 8800 Series CVE-2019-1765 Path Traversal Arbitrary File Write Vulnerability
| Bugtraq ID: | 107500 |
| Class: | Input Validation Error |
| CVE: |
CVE-2019-1765 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 20 2019 12:00AM |
| Updated: | Mar 20 2019 12:00AM |
| Credit: | David Gullasch of modzero AG |
| Vulnerable: |
Cisco Wireless IP Phone 8821-EX 11.0(4)SR3 Cisco Wireless IP Phone 8821-EX 11.0(4)SR2 Cisco Wireless IP Phone 8821-EX 11.0(4)SR1 Cisco IP Phone 8800 Series 11.0(4)SR2 Cisco IP Conference Phone 8832 12.1 |
| Not Vulnerable: |
Cisco Wireless IP Phone 8821-EX 11.0(5) Cisco IP Phone 8800 Series 11.0(5.12) Cisco IP Phone 8800 Series 11.0(5) Cisco IP Phone 8800 Series 11.0(4)MN63 Cisco IP Conference Phone 8832 12.5(1)SR1 |
Discussion
Cisco IP Phone 8800 Series CVE-2019-1765 Path Traversal Arbitrary File Write Vulnerability
Cisco IP Phone 8800 Series are prone to an arbitrary file write vulnerability.
Successful exploits may allow an attacker to write arbitrary files to the affected system or execute arbitrary code in the context of the affected system. This may aid in further attacks.
This issue is tracked by Cisco Bug IDs CSCvn56213 and CSCvo57138.
Cisco IP Phone 8800 Series are prone to an arbitrary file write vulnerability.
Successful exploits may allow an attacker to write arbitrary files to the affected system or execute arbitrary code in the context of the affected system. This may aid in further attacks.
This issue is tracked by Cisco Bug IDs CSCvn56213 and CSCvo57138.