CVE-2013-3426

The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a…

published July 17, 2013

CVSS
—
EPSS
1%
Percentile
67.7
In the wild
Unconfirmed
What it is

The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01187 · 67.7th percentile
Published
2013-07-17T21:00Z
EPSS history
Timeline
  • 17 JUL 21:00Z
    The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a…
    cvelistv5