Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Akuvox Component: Sp-r50p Firmware Clear all filters
TI-2019-09191 CVE-2019-12326 · GHSA-w353-q44q-75p3

Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP…

Priority MEDIUM 47

Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a manipulated ringtone file, with an executable payload (shell commands within the fi…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02985 Published 2019-07-22 No fix listed CWE-434
TI-2019-09189 CVE-2019-12324 · GHSA-fvrw-43j5-v43w

A command injection (missing input validation) issue in the IP address field for the…

Priority LOW 39

A command injection (missing input validation) issue in the IP address field for the logging server in the configuration web interface on the Akuvox R50P VoIP phone with firmware 50.0.6.156 allows an authenticated remote…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.04343 Published 2019-07-22 No fix listed CWE-78