CVE-2013-3426
18.07.2013, 12:51
The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | unified_ip_phones_9900_series_firmware | - |
| cisco | unified_ip_phone_9951 | * |
| cisco | unified_ip_phone_9971 | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration