CVE-2021-34711

🗓️ 06 Oct 2021 19:46:32Reported by ciscoType

Vulnerability in Cisco IP Phone debug shell allows unauthorized file system acces

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the command interface of Cisco IP Phone microprogramming software arises due to an incorrect restriction on the path to the restricted access directory. This allows a malicious individual to read any file in the device’s file system.	21 Apr 202200:00	–	bdu_fstec
Circl	CVE-2021-34711	7 Oct 202100:32	–	circl
Cisco	Cisco IP Phone Software Arbitrary File Read Vulnerability	6 Oct 202116:00	–	cisco
CNNVD	Cisco IP Phone 路径遍历漏洞	6 Oct 202100:00	–	cnnvd
Cvelist	CVE-2021-34711 Cisco IP Phone Software Arbitrary File Read Vulnerability	6 Oct 202119:46	–	cvelist
EUVD	EUVD-2021-21361	7 Oct 202500:30	–	euvd
NVD	CVE-2021-34711	6 Oct 202120:15	–	nvd
Prion	Input validation	6 Oct 202120:15	–	prion
Tenable Nessus	Cisco IP Phones Software Arbitrary File Read (CVE-2021-34711)	18 Mar 202400:00	–	nessus
Vulnrichment	CVE-2021-34711 Cisco IP Phone Software Arbitrary File Read Vulnerability	6 Oct 202119:46	–	vulnrichment

NVD

Node

cisco ip_conference_phone_7832_firmwareRange<14.1(1)

AND

cisco ip_conference_phone_7832Match-

Node

cisco ip_conference_phone_8832_firmwareRange<14.1(1)

AND

cisco ip_conference_phone_8832Match-

Node

cisco ip_phone_7811_firmwareRange<14.1(1)

AND

cisco ip_phone_7811Match-

Node

cisco ip_phone_7821_firmwareRange<14.1(1)

AND

cisco ip_phone_7821Match-

Node

cisco ip_phone_7832_firmwareRange<14.1(1)

AND

cisco ip_phone_7832Match-

Node

cisco ip_phone_7841_firmwareRange<14.1(1)

AND

cisco ip_phone_7841Match-

Node

cisco ip_phone_7861_firmwareRange<14.1(1)

AND

cisco ip_phone_7861Match-

Node

cisco ip_phone_8811_firmwareRange<14.1(1)

AND

cisco ip_phone_8811Match-

Node

cisco ip_phone_8831_firmwareRange<14.1(1)

AND

cisco ip_phone_8831Match-

Node

cisco ip_phones_8832_firmwareRange<14.1(1)

AND

cisco ip_phones_8832Match-

Node

cisco ip_phone_8841_firmwareRange<14.1(1)

AND

cisco ip_phone_8841Match-

Node

cisco ip_phone_8845_firmwareRange<14.1(1)

AND

cisco ip_phone_8845Match-

Node

cisco ip_phone_8851_firmwareRange<14.1(1)

AND

cisco ip_phone_8851Match-

Node

cisco ip_phone_8861_firmwareRange<14.1(1)

AND

cisco ip_phone_8861Match-

Node

cisco ip_phone_8865_firmwareRange<14.1(1)

AND

cisco ip_phone_8865Match-

Node

cisco wireless_ip_phone_8821_firmwareRange<11.0(6)sr2

AND

cisco wireless_ip_phone_8821Match-

[
  {
    "product": "Cisco IP Phones with Multiplatform Firmware",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-arbfileread-NPdtE2Ow

21 Nov 2024 06:11Current

5.2Medium risk

Vulners AI Score5.2

CVSS 22.1

CVSS 3.15.5

EPSS0.00067

SSVC

cisco ip phone vulnerability debug shell file system unauthorized access security nvd cve-2021-34711