Unscored CVE-2016-1435 EUVD-2016-2534GHSA-jx67-6xfj-h9r4

Cisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitr…

Published Jun 23, 2016 · Updated Aug 5, 2024 · Assigned by cisco

Description

Cisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014.

References

1036138 vdb-entry
20160620 Cisco 8800 Series IP Phone Filesystem Permission Enforcement Unauthorized Access Vulnerability vendor-advisory