A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local malicious user to read any file on the device file system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted input to a debug shell command. A successful exploit could allow the malicious user to read any file on the device file system.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco ip_conference_phone_7832_firmware |
||
cisco ip_conference_phone_8832_firmware |
||
cisco ip_phone_7811_firmware |
||
cisco ip_phone_7821_firmware |
||
cisco ip_phone_7832_firmware |
||
cisco ip_phone_7841_firmware |
||
cisco ip_phone_7861_firmware |
||
cisco ip_phone_8811_firmware |
||
cisco ip_phone_8831_firmware |
||
cisco ip_phones_8832_firmware |
||
cisco ip_phone_8841_firmware |
||
cisco ip_phone_8845_firmware |
||
cisco ip_phone_8851_firmware |
||
cisco ip_phone_8861_firmware |
||
cisco ip_phone_8865_firmware |
||
cisco wireless_ip_phone_8821_firmware |
Vulmon