EUVD-2016-2502

Malware in sbrugna...

Command injection

CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005...

CVE-2016-1403

CVE-2016-1403 affects Cisco IP 8800 Series Phones running firmware 11.0.1 and earlier. A vulnerability in the btcli CLI utility allows an authenticated, local attacker to inject commands and gain OS-level privileges due to insufficient input validation. Impact is local privilege escalation with p...

CVE-2016-1403: Improper Input Validation

CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005...

PT-2016-4765

Name of the Vulnerable Software and Affected Versions CISCO IP 8800 phones versions 11.0.1 and earlier Description The issue allows local users to gain privileges for OS command execution via crafted CLI commands. Recommendations For versions 11.0.1 and earlier, update to a version later than...

Cisco IP 8800 Series Phones btcli Utility Command Injection Vulnerability

A vulnerability in a command-line interface CLI utility of the Cisco IP 8800 Series Phones could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted...