medium5.0
CVE-2013-3426
The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a path…
Impact
The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Ip Phones 9900 Series Firmware | All versions |
| Cisco | Unified Ip Phone 9951 | All versions |
| Cisco | Unified Ip Phone 9971 | All versions |