Cisco 8800 Series IP Phone Filesystem Permission Enforcement Unauthorized Access (CVE-2016-1435)

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot fo...

CVE-2016-1435

CVE-2016-1435 affects Cisco’s 8800 Series IP Phones running software 11.0(1) , where mounted-filesystem permissions are not properly enforced. The vulnerability allows local users with shell access to write to arbitrary files and potentially modify system content. The root cause is insufficient e...