Absolute Path Traversal in Cisco Systems, Inc products - CVE-2021-34711

Vulnerability identifier: #VU57111

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-34711

CWE-ID: CWE-36

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A local user can provide a specially crafted input to a debug shell command and read arbitrary files on the system.

Cisco IP Conference Phone 7832
Cisco IP Conference Phone 8832
Cisco IP Phone 8800 Series
Cisco Wireless IP Phone 8821
IP Phone 7800 Series

Install update from vendor's website.

Cisco IP Conference Phone 7832 - update to 14.1(1)
Cisco IP Conference Phone 8832 - update to 14.1(1)
IP Phone 7800 Series - update to 14.1(1)
Cisco IP Phone 8800 Series - update to 14.1(1)
Cisco Wireless IP Phone 8821 - update to 11.0(6)Sr2

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-arbfileread-NPdtE2Ow

• Absolute Path Traversal in Cisco IP Phone Software