CVE-2016-1476

Cisco IP Phone 8800 Series (software 11.0) is affected by CVE-2016-1476: a cross-site scripting (XSS) vulnerability in the web interface due to insufficient sanitization of parameter values. It can be exploited by remote authenticated users to inject arbitrary script/HTML via crafted parameters. ...

CVE-2016-1479

CVE-2016-1479 affects Cisco IP Phone 8800 Series running software 11.0(1). The issue is a DoS caused by memory corruption in the device’s web server when processing a crafted HTTP request. The root cause is improper validation of user-supplied input by the affected software. A remote, unauthentic...

Cisco IP Phone 8800 Series Denial of Service Vulnerability

Cisco IP 8800 Series Phones are digital phone system products. A denial of service vulnerability exists in the Web Server of the Cisco IP Phone 8800 Series. A remote attacker could exploit this vulnerability to cause a denial of service by sending an HTTP request to an affected device...

Cisco IP Phone 8800 Series Cross-Site Scripting Vulnerability

The Cisco IP Phone 8800 Series is a telephony product that provides video and VoIP communication features. A cross-site scripting vulnerability exists in the Cisco IP Phone 8800 Series, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can b...

Cisco IP Phone 8800 Series Web Application Buffer Overflow Vulnerability (cisco-sa-20160609-ipp)

Cisco IP Phone 8800 Series are prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1434

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

CVE-2016-1434

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

Code injection

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

Design/Logic Flaw

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1434

CVE-2016-1434 affects Cisco 8800 Series IP Phones running software 11.0(1). The issue is a directory-traversal vulnerability in the license/certificate upload interface, where insufficient input validation allows remote authenticated attackers to delete arbitrary files via an invalid file (Bug ID...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1435

CVE-2016-1435 affects Cisco’s 8800 Series IP Phones running software 11.0(1) , where mounted-filesystem permissions are not properly enforced. The vulnerability allows local users with shell access to write to arbitrary files and potentially modify system content. The root cause is insufficient e...

Cisco IP Phone 8800 Series Directory Traversal Vulnerability

Cisco IP Phone 8800 Series is an 8000 series IP phone product from Cisco USA. The product provides voice and video features. A directory traversal vulnerability exists in the Cisco IP Phone 8800 Series using software version 11.01. A remote attacker could exploit this vulnerability by uploading a...

Cisco IP Phone 8800 Series Unauthorized Access Vulnerability

Cisco IP Phone 8800 Series is an 8000 series IP phone product from Cisco USA. The product provides voice and video features. An unauthorized access vulnerability exists in the Cisco IP Phone 8800 Series using software version 11.01. An attacker could exploit this vulnerability to gain access and...

Cisco 8800 Series IP Phone Filesystem Permission Enforcement Unauthorized Access Vulnerability

A vulnerability in the mounted filesystem of Cisco 8800 Series IP Phones could allow an authenticated, remote attacker to access any file, including the right to change the file mode, on a targeted device. The vulnerability is due to insufficient enforcement of filesystem permissions. An attacker...

Cisco IP 8800 Device Web Application Denial of Service Vulnerability

Cisco IP 8800 Series Phones are digital phone system products. The web application of the Cisco IP 8800 Series Phones does not properly check the size of input data, which can be exploited by an unauthenticated, remote attacker to cause the web server process to stop responding, resulting in a...

CVE-2015-8800

CVE-2015-8800 affects Symantec SES:CSP/SDCS:SA and related components: SES:CSP 1.0.x before 1.0 MP5, SES:CSP for Controllers and Devices 6.5.0 before MP1, SCSP before 5.2.9 MP6, DCS:SA 6.x before 6.5 MP1 and 6.6 before MP1, and DCS:SA and Agents through 6.6 MP1. The issue allows remote authentica...

Cisco IP 8800 phone privilege acquisition vulnerability

Cisco IP 8800 phone is a phone product from Cisco USA that provides video and VoIP communication features. A privilege acquisition vulnerability exists in the Cisco IP 8800 phone using software version 11.0.1 and earlier. A local attacker can use specially crafted CLI commands to gain privileges ...