EUVD-2016-2534

Malware in sbrugna...

EUVD-2016-2502

Malware in sbrugna...

EUVD-2016-2533

Malware in sbrugna...

The vulnerability in the web interface of the microprogramming software for Cisco IP Phones 6800, 7800, 8800, and Cisco Video Phone 8875 allows a perpetrator to disclose protected information.

The vulnerability of the web-based management interface for Cisco IP Phones 6800, 7800, 8800, and Cisco Video Phone 8875 is related to the ability to bypass authentication due to a software bug. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

Vulnerability fixed in Cisco IP phones

Cisco has fixed a vulnerability in the firmware for Cisco IP phones series 7800 and 8800. An unauthenticated malicious person with access to the phone network could exploit the vulnerability to cause cause a stack overflow on the vulnerable device. With this causes a denial-of-service and allows...

The vulnerability of the web interface of the microprogramming software for Cisco IP Phones series 8800 allows a perpetrator to perform arbitrary actions on the vulnerable device.

The vulnerability of the web interface of Cisco IP phones—IP Phone 8800, IP Conference Phone 8832, IP Phone 8821, and IP Phone 8821-EX—is related to insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability allows a malicious actor to perform...

Cisco IP Phone 8800 Series Device Denial of Service Vulnerability

The Cisco IP Phone 8800 Series devices is an IP phone from Cisco that provides video and VoIP communication features.Session Initiation Protocol SIP is a session initiation protocol used in... A denial of service vulnerability exists in the handling of Session Initiation Protocol SIP calls in Cis...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1434

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

CVE-2016-1434

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

Code injection

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

Design/Logic Flaw

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1434

CVE-2016-1434 affects Cisco 8800 Series IP Phones running software 11.0(1). The issue is a directory-traversal vulnerability in the license/certificate upload interface, where insufficient input validation allows remote authenticated attackers to delete arbitrary files via an invalid file (Bug ID...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1435

CVE-2016-1435 affects Cisco’s 8800 Series IP Phones running software 11.0(1) , where mounted-filesystem permissions are not properly enforced. The vulnerability allows local users with shell access to write to arbitrary files and potentially modify system content. The root cause is insufficient e...

Cisco IP 8800 Device Web Application Denial of Service Vulnerability

Cisco IP 8800 Series Phones are digital phone system products. The web application of the Cisco IP 8800 Series Phones does not properly check the size of input data, which can be exploited by an unauthenticated, remote attacker to cause the web server process to stop responding, resulting in a...