Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A command injection (missing input validation) issue in the IP address field for the logging server in the configuration web interface on the Akuvox R50P VoIP phone with firmware 50.0.6.156 allows an authenticated remote attacker in the same network to trigger OS commands via shell metacharacters in a POST request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AKUVOX NETWORKS R50P VoIP phone 命令操作系统命令注入漏洞
Vulnerability Description
AKUVOX NETWORKS R50P VoIP phone是中国AKUVOX NETWORKS公司的一款IP电话。 使用50.0.6.156版本固件的AKUVOX NETWORKS R50P VoIP phone中的配置Web界面的IP地址字段（用于日志服务器）存在命令操作系统命令注入漏洞。该漏洞源于外部输入数据构造代码段的过程中，网络系统或产品未正确过滤其中的特殊元素。攻击者可利用该漏洞生成非法的代码段，修改网络系统或组件的预期的执行控制流。
CVSS Information
N/A
Vulnerability Type
N/A