Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a manipulated ringtone file, with an executable payload (shell commands within the file) and trigger code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AKUVOX NETWORKS R50P VoIP phone 代码问题漏洞
Vulnerability Description
AKUVOX NETWORKS R50P VoIP phone是中国AKUVOX NETWORKS公司的一款IP电话。 AKUVOX NETWORKS R50P VoIP phone 50.0.6.156版本中的ringtone上传功能存在安全漏洞，该漏洞源于缺少对文件和路径的验证。攻击者可利用该漏洞上传脚本文件。
CVSS Information
N/A
Vulnerability Type
N/A