CVE-2013-5758 in Yealink SIP-T38G
Summary
cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissions, and modifying files.
Reservation
09/18/2013
Disclosure
08/03/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70535 | Yealink SIP-T38G os command injection | 78 | Proof-of-Concept | Not defined | CVE-2013-5758 |