CVE-2013-5533

Cisco Unified IP Phones 9900 Series Firmware - Privilege Escalation via Image-Upgrade Parameter

Title source: llm

Description

The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.

References (3)

Core 3

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5533

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/62943

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/98337

Scores

EPSS 0.0027

EPSS Percentile 19.2%

Details

CWE

CWE-20

Status published

Products (3)

cisco/unified_ip_phone_9951

cisco/unified_ip_phone_9971

cisco/unified_ip_phones_9900_series_firmware

Published Oct 11, 2013

Tracked Since Feb 18, 2026