CVE-2013-3426
Cisco Unified IP Phones 9900 Series Arbitrary File Read via Path Traversal
Title source: llmDescription
The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3426
Scores
EPSS
0.0119
EPSS Percentile
64.6%
Details
CWE
CWE-264
Status
published
Products (3)
cisco/unified_ip_phone_9951
cisco/unified_ip_phone_9971
cisco/unified_ip_phones_9900_series_firmware
Published
Jul 18, 2013
Tracked Since
Feb 18, 2026