1. Home
  2. CVE Database
  3. CVE-2021-34711
MEDIUM · 5.5

CVE-2021-34711

A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This vulnerability is due to insufficient input v...

Vulnerability Description

A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted input to a debug shell command. A successful exploit could allow the attacker to read any file on the device file system.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
CiscoIp Conference Phone 7832 Firmware< 14.1\(1\)
CiscoIp Conference Phone 7832-
CiscoIp Conference Phone 8832 Firmware< 14.1\(1\)
CiscoIp Conference Phone 8832-
CiscoIp Phone 7811 Firmware< 14.1\(1\)
CiscoIp Phone 7811-
CiscoIp Phone 7821 Firmware< 14.1\(1\)
CiscoIp Phone 7821-
CiscoIp Phone 7832 Firmware< 14.1\(1\)
CiscoIp Phone 7832-
CiscoIp Phone 7841 Firmware< 14.1\(1\)
CiscoIp Phone 7841-
CiscoIp Phone 7861 Firmware< 14.1\(1\)
CiscoIp Phone 7861-
CiscoIp Phone 8811 Firmware< 14.1\(1\)
CiscoIp Phone 8811-
CiscoIp Phone 8831 Firmware< 14.1\(1\)
CiscoIp Phone 8831-
CiscoIp Phones 8832 Firmware< 14.1\(1\)
CiscoIp Phones 8832-

Related Weaknesses (CWE)

CWE-22CWE-36

References

FAQ

What is CVE-2021-34711?

CVE-2021-34711 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This vulnerability is due to insufficient input v...

How severe is CVE-2021-34711?

CVE-2021-34711 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-34711?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ip Conference Phone 7832 Firmware, Cisco Ip Conference Phone 7832, Cisco Ip Conference Phone 8832 Firmware, Cisco Ip Conference Phone 8832, Cisco Ip Phone 7811 Firmware.