PT-2016-4785 · Cisco · Cisco 8800

Published 2016-06-23 · Updated 2016-11-30 · CVE-2016-1435

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco 8800 phones version 11.0(1)

Description The issue concerns improper enforcement of mounted-filesystem permissions, allowing local users with shell access to write to arbitrary files.

Recommendations For Cisco 8800 phones version 11.0(1), consider restricting shell access to minimize the risk of exploitation until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-1435

Affected Products

Cisco 8800

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-1435 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1435 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-ipp · Vendor Advisory
• http://securitytracker.com/id/1036138 · Note