Description
CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ipp
Scores
CVSS v3
7.8
EPSS
0.0051
EPSS Percentile
39.8%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
Status
published
Products (5)
cisco/ip_phone_8800_series_firmware
10.2\(1\)
cisco/ip_phone_8800_series_firmware
10.2\(2\)
cisco/ip_phone_8800_series_firmware
10.3
cisco/ip_phone_8800_series_firmware
10.3\(2\)
cisco/ip_phone_8800_series_firmware
11.0\(1\)
Published
Jun 04, 2016
Tracked Since
Feb 18, 2026