CVE-2019-14657

2019-10-0812:02:34

mitre

www.cve.org

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

60.9%

JSON

Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with …/…/…/…/ allows replacement of almost any file on a phone. This leads to password replacement and arbitrary code execution as root.

References

cerebusforensics.com/yealink/exploit.html

sway.office.com/3pCb559LYVuT0eig