#VU57111 Absolute Path Traversal in Cisco Systems, Inc products - CVE-2021-34711

Vulnerability identifier: #VU57111

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-34711

CWE-ID: CWE-36

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Cisco IP Conference Phone 7832
Hardware solutions / Office equipment, IP-phones, print servers
Cisco IP Conference Phone 8832
Hardware solutions / Office equipment, IP-phones, print servers
Cisco IP Phone 8800 Series
Hardware solutions / Office equipment, IP-phones, print servers
Cisco Wireless IP Phone 8821
Hardware solutions / Office equipment, IP-phones, print servers
IP Phone 7800 Series
Other software / Other software solutions

Vendor: Cisco Systems, Inc

Description

The vulnerability allows a local user to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A local user can provide a specially crafted input to a debug shell command and read arbitrary files on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Cisco IP Conference Phone 7832: 14.1

Cisco IP Conference Phone 8832: 14.1

IP Phone 7800 Series: 14.1

Cisco IP Phone 8800 Series: 14.1

Cisco Wireless IP Phone 8821: 11.0

---

External links
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-arbfileread-NPdtE2Ow

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.