Description
The license-certificate upload functionality on Cisco 8800 phones with software 11.0(1) allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010.
References
- 20160620 Cisco 8800 Series IP Phone Directory Traversal Vulnerability vendor-advisory
- 1036139 vdb-entry