2 matches found
Command injection
The web framework on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424...
5CVSS7.5AI score0.01362EPSS
SaveExploits0References5Affected Software2
CVE-2015-0604: Improper Input Validation
The web framework on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424...
5CVSS6AI score0.01362EPSS
SaveExploits0References2
20