CVE-2013-5533

The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.

Score

CVSS 2.0 6.0 Medium

Status

Modified - psirt@cisco.com

Published

2013-10-11

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Unified Ip Phone 9951 (Cisco)
• Unified Ip Phone 9971 (Cisco)
• Unified Ip Phones 9900 Series Firmware (Cisco)

References

• http://osvdb.org/98337
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5533
• http://www.securityfocus.com/bid/62943