Atcom A10W Command Injection Vulnerability

ATCOM Technology A10W VoIP phone is an IP phone from ATCOM Technology China. A command injection vulnerability exists in the Remote Directory Configuration URI of the web interface in the ATCOM Technology A10W VoIP phone using firmware version 2.6.1a2421. The vulnerability stems from a network...