Cisco Unified IP Phones 9900 Series CVE-2013-5533 Local Command Injection Vulnerability
BID:62943
Info
Cisco Unified IP Phones 9900 Series CVE-2013-5533 Local Command Injection Vulnerability
| Bugtraq ID: | 62943 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-5533 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 10 2013 12:00AM |
| Updated: | Oct 16 2013 12:54AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cisco Unified IP Phones 9900 Series CVE-2013-5533 Local Command Injection Vulnerability
The Cisco Unified IP Phone 9900 series is prone to a local command-injection vulnerability.
A local attacker can exploit this issue to execute arbitrary commands with root privileges. Successful exploits may compromise the affected device.
This issue is being tracked by Cisco Bug ID CSCuh10334.
The Cisco Unified IP Phone 9900 series is prone to a local command-injection vulnerability.
A local attacker can exploit this issue to execute arbitrary commands with root privileges. Successful exploits may compromise the affected device.
This issue is being tracked by Cisco Bug ID CSCuh10334.
Exploit / POC
Cisco Unified IP Phones 9900 Series CVE-2013-5533 Local Command Injection Vulnerability
Attackers require local interactive access to exploit this issue.
Attackers require local interactive access to exploit this issue.
Solution / Fix
Cisco Unified IP Phones 9900 Series CVE-2013-5533 Local Command Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Unified IP Phones 9900 Series CVE-2013-5533 Local Command Injection Vulnerability
References:
References:
- Cisco Homepage (Cisco )