Riskcovery

CVE-2018-0341

State
Published
Severity
Not scored
Published
Jul 16, 2018
Updated
Nov 29, 2024
Reserved
Nov 27, 2017

Read the record on cve.org

Description

A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware before 11.2(1) could allow an authenticated, remote attacker to perform a command injection and execute commands with the privileges of the web server. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including arbitrary shell commands in a specific user input field. Cisco Bug IDs: CSCvi51426.

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
Cisco IP Phone 6800, 7800, and 8800 unknownn/a
  • Cisco IP Phone 6800, 7800, and 8800 unknownAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.