CVE-2013-5533

Summary

The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.

Impact & exploitability

AV:L/AC:H/Au:S/C:C/I:C/A:C

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

• NVD record
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5533Advisory
• http://osvdb.org/98337
• http://www.securityfocus.com/bid/62943Advisory