CVE-2013-5756 in Yealink SIP-T38G
Summary
Directory traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to cgi-bin/cgiServer.exx.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
09/18/2013
Disclosure
08/03/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70533 | Yealink SIP-T38G path traversal | 22 | Proof-of-Concept | Not defined | CVE-2013-5756 |