Vulnerability in Cisco Unified Ip Phone 9951

CVE-2013-3426

The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810.

EPSS: 0.012 (64.7th percentile) — read the EPSS interpretation.