PT-2016-4785 · Cisco · Cisco 8800

Publicado 2016-06-23 · Atualizado 2016-11-30 · CVE-2016-1435

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco 8800 phones version 11.0(1)

Description The issue concerns improper enforcement of mounted-filesystem permissions, allowing local users with shell access to write to arbitrary files.

Recommendations For Cisco 8800 phones version 11.0(1), consider restricting shell access to minimize the risk of exploitation until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-1435

Produtos afetados

Cisco 8800

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-1435 · Nota de Segurança
• http://securitytracker.com/id/1036138 · Nota
• https://osv.dev/vulnerability/CVE-2016-1435 · Aviso do Fabricante
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-ipp · Aviso do Fabricante