Unscored CVE-2013-3426 EUVD-2013-3361GHSA-5jqv-g934-rpjm

The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files …

Published Jul 17, 2013 · Updated Sep 16, 2024 · Assigned by cisco

Description

The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810.

References

20130717 Cisco 9900 Series Phone Arbitrary File Download Vulnerability vendor-advisory