Description
The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.
References
- 20131010 Cisco Unified IP Phones 9900 Series Image Upgrade Command Injection Vulnerability vendor-advisory
- 62943 vdb-entry
- 98337 vdb-entry