The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.
References
| Link | Resource |
|---|---|
| http://osvdb.org/98337 | |
| http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5533 | Vendor Advisory |
| http://www.securityfocus.com/bid/62943 | Third Party Advisory VDB Entry |
| http://osvdb.org/98337 | |
| http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5533 | Vendor Advisory |
| http://www.securityfocus.com/bid/62943 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 01:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://osvdb.org/98337 - | |
| References | () http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5533 - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/62943 - Third Party Advisory, VDB Entry |
Information
Published : 2013-10-11 03:54
Updated : 2025-04-11 00:51
NVD link : CVE-2013-5533
Mitre link : CVE-2013-5533
CVE.ORG link : CVE-2013-5533
JSON object : View
Products Affected
cisco
- unified_ip_phones_9900_series_firmware
- unified_ip_phone_9951
- unified_ip_phone_9971
CWE
CWE-20
Improper Input Validation
