CVE-2025-34023
HIGH EXPLOITED NUCLEIKarel IP Phone IP1211 - Authenticated Path Traversal via CGI Server Page Parameter
Title source: llmExploitation Summary
CVE-2025-34023 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including berat isler. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in the Karel IP1211 IP Phone Web Management Panel. It allows authenticated users to access sensitive files like /etc/passwd and /etc/shadow via the 'cgiServer.exx?page=' parameter.
Description
A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx endpoint fails to properly sanitize user input to the page parameter, allowing remote authenticated attackers to access arbitrary files on the underlying system by using crafted path traversal sequences. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in the Karel IP1211 IP Phone Web Management Panel. It allows authenticated users to access sensitive files like /etc/passwd and /etc/shadow via the 'cgiServer.exx?page=' parameter.
Nuclei Templates (1)
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H