CVE-2019-12326

The CVE-2019-12326 issue affects the Akuvox R50P VoIP phone (version 50.0.6.156). The vulnerability arises from missing file and path validation in the ringtone upload function, enabling an attacker to upload a manipulated ringtone file that contains an executable payload and trigger code executi...