CVE-2019-12325

The Htek UC902 VoIP phone web management interface contains several buffer overflow vulnerabilities in the firmware version 2.0.4.4.46, which allow an attacker…

High · published July 22, 2019

CVSS v3.0
8.2
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

The Htek UC902 VoIP phone web management interface contains several buffer overflow vulnerabilities in the firmware version 2.0.4.4.46, which allow an attacker to crash the device (DoS) without authentication or execute code (authenticated as a user) to spawn a remote shell as a root user.

The record
Technical detail
CVSS v3.0
8.2 · HIGH
Vector
CVSS:3.0/AC:L/AV:A/A:H/C:L/I:L/PR:L/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01987 · 80.5th percentile
Published
2019-07-22T15:54Z
EPSS history
Timeline
  • 22 JUL 15:54Z
    The Htek UC902 VoIP phone web management interface contains several buffer overflow vulnerabilities in the firmware version 2.0.4.4.46, which allow an attacker…
    cvelistv5