CVE-2016-1435 - Cisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014

Back Back to CVE browser

HIGH

Cisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014

Published Jun 23, 2016

7.0

HIGH

CVSS 3.0

EPSS 0.27%

Description

Cisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-ipp
vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securitytracker.com/id/1036138
vdb-entryx_refsource_SECTRACK

Link	Providers	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-ipp		vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securitytracker.com/id/1036138		vdb-entryx_refsource_SECTRACK

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Jun 23, 2016

Updated Aug 5, 2024

Reserved Jan 4, 2016

Link CVE-2016-1435

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2016-1435

Red Hat

Severity n/a

Public date n/a

Links CVE-2016-1435