CVE-2013-5758 in Yealink SIP-T38G
요약 (영어)
cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissions, and modifying files.
예약하다
2013. 09. 18.
공개
2014. 08. 03.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 70535 | Yealink SIP-T38G 권한 상승 | 78 | 개념 증명 | 정의되지 않음 | CVE-2013-5758 |