Lucene search
PRIOn knowledge basePRION:CVE-2018-16221HistoryMay 29, 2019 - 6:29 p.m.
Path traversal
2019-05-2918:29:00
PRIOn knowledge base
www.prio-n.com
3
The diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) does not validate (escape) the path information (path traversal), which allows an authenticated remote attacker to get access to privileged information (e.g., /etc/passwd) via path traversal (relative path information in the file parameter of the corresponding POST request).
| CPE | Name | Operator | Version |
|---|---|---|---|
| ultra-elegant_ip_phone_sip-t41p_firmware | eq | 66.83.0.35 |
Related
cvelist
cvelist
CVE-2018-16221
2019-05-29 17:59:34
cve
cve
CVE-2018-16221
2019-05-29 18:29:00
nvd
nvd
CVE-2018-16221
2019-05-29 18:29:00