Tracker / CVE-2015-0604
CVE-2015-0604
Medium 5.0
The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424.
Affected products and versions
| cisco | unified_ip_phones_9951_firmware |
|---|---|
| cisco | unified_ip_phones_9971_firmware |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.