IQID:12579 HTTP Polycom VVX-Series Business Media Phones Directory Traversal Vulnerability S

IQID: 12579 - January 2016

Polycom VVX-series Business Media Phones allow authenticated users to execute directory traversal attacks. Polycom VVX-series IP phones provide a web administrative interface. Inside this interface we discovered two URLs that exposed a "file=filename" parameters. Due to unsafe file system operations in this interface, it is possible to exploit.

A Full Description is available for this threat, please sign in for access to Full Description.

 

Attack Data

Attack Data is available for this threat, please sign in for access to Attack Data.

 

CVSS Information

CVSS Information is available for this threat, please sign in for access to CVSS Information.

 

Date

Date Information is available for this threat, please sign in for access to Date Information.