CVE-2016-1434

MEDIUM

Cisco 8800 <11.0(1) - File Deletion

Title source: llm

Description

The license-certificate upload functionality on Cisco 8800 phones with software 11.0(1) allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010.

References (2)

Scores

CVSS v3 6.5
EPSS 0.0016
EPSS Percentile 37.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Classification

CWE
CWE-22 CWE-20
Status draft

Affected Products (1)

cisco/ip_phone_8800_series_firmware

Timeline

Published Jun 23, 2016
Tracked Since Feb 18, 2026