CVE-2016-1435: High severity cisco ip phone 8800 series vulnerability
Cisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1435?
CVE-2016-1435 has a medium severity rating due to its potential for local privilege escalation.
How do I fix CVE-2016-1435?
To fix CVE-2016-1435, update the Cisco IP Phone 8800 Series firmware to a version that addresses the vulnerability.
What are the potential impacts of CVE-2016-1435?
The potential impacts of CVE-2016-1435 include unauthorized access to sensitive files and possible manipulation of device settings.
Who is affected by CVE-2016-1435?
CVE-2016-1435 affects users of the Cisco IP Phone 8800 series running firmware version 11.0(1).
What kind of vulnerability is CVE-2016-1435?
CVE-2016-1435 is a local file permission vulnerability that allows users to write to arbitrary files on the device.