CVE-2013-5758 in SIP-T38G

Resumen (Inglés)

cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissions, and modifying files.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2013-09-18

Divulgación

2014-08-03

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
70535	Yealink SIP-T38G escalada de privilegios	78	Prueba de concepto	No está definido	CVE-2013-5758

Fuentes

• MITRE
• NVD
• CVE Details