CVE-2013-5757 in Yealink SIP-T38G
Summary
Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a full pathname in the dumpConfigFile function in the command parameter to cgi-bin/cgiServer.exx.
Reservation
09/18/2013
Disclosure
08/03/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70534 | Yealink SIP-T38G dumpConfigFile path traversal | 22 | Proof-of-Concept | Not defined | CVE-2013-5757 |