The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone’s filesystem via crafted HTTP requests, aka Bug ID CSCup90424.
CPE | Name | Operator | Version |
---|---|---|---|
unified_ip_phones_9951_firmware | eq | 9.4.1 | |
unified_ip_phones_9971_firmware | eq | 9.4.1 |