Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-5758
HistoryAug 03, 2014 - 6:55 p.m.

CVE-2013-5758

2014-08-0318:55:04
CWE-78
[email protected]
web.nvd.nist.gov
31
cve-2013-5758
remote execution
yealink
voip
sip
command injection
security vulnerability

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.1%

JSON

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissions, and modifying files.

Affected configurations

NVD
Node
yealinksip-t38gMatch-
CPENameOperatorVersion
yealink:sip-t38gyealink sip-t38geq-

Related

prion 2
cvelist 1
nvd 2
exploitpack 2
seebug 2
packetstorm 2
cve 1
exploitdb 2
zdt 1
openvas 1
prion
prion
Cross site request forgery (csrf)
2014-08-03 18:55:00
Design/Logic Flaw
2014-08-03 18:55:00
cvelist
cvelist
CVE-2013-5758
2014-08-03 18:00:00
nvd
nvd
CVE-2013-5758
2014-08-03 18:55:04
CVE-2013-5759
2014-08-03 18:55:04
exploitpack
exploitpack
Yealink VoIP Phone SIP-T38G - Privilege Escalation
2014-06-13 00:00:00
Yealink VoIP Phone SIP-T38G - Remote Command Execution
2014-06-13 00:00:00
seebug
seebug
Yealink VoIP Phone SIP-T38G - Remote Command Execution
2014-07-01 00:00:00
Yealink VoIP Phone SIP-T38G - Privileges Escalation
2014-07-01 00:00:00
packetstorm
packetstorm
Yealink VoIP Phone SIP-T38G Remote Command Execution
2014-06-13 00:00:00
Yealink VoIP Phone SIP-T38G Privilege Escalation
2014-06-13 00:00:00
cve
cve
CVE-2013-5759
2014-08-03 18:55:04
exploitdb
exploitdb
Yealink VoIP Phone SIP-T38G - Privilege Escalation
2014-06-13 00:00:00
Yealink VoIP Phone SIP-T38G - Remote Command Execution
2014-06-13 00:00:00
zdt
zdt
Yealink VoIP Phone SIP-T38G - Multiple Vulnerabilities
2014-06-14 00:00:00
openvas
openvas
Yealink VoIP Phone SIP-T38G Multiple Vulnerabilities
2014-06-20 00:00:00

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.1%

JSON
Related for CVE-2013-5758
prion2cvelist1nvd2exploitpack2seebug2packetstorm2cve1exploitdb2zdt1openvas1