Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A command injection (missing input validation) issue in the remote phonebook configuration URI in the web interface of the Atcom A10W VoIP phone with firmware 2.6.1a2421 allows an authenticated remote attacker in the same network to trigger OS commands via shell metacharacters in a POST request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ATCOM Technology A10W VoIP phone 命令操作系统命令注入漏洞
Vulnerability Description
ATCOM Technology A10W VoIP phone是中国简能网络技术（ATCOM Technology）公司的一款IP电话。 使用2.6.1a2421版本固件的ATCOM Technology A10W VoIP phone中的Web界面的远程通讯录配置URI存在命令操作系统命令注入漏洞。该漏洞源于外部输入数据构造代码段的过程中，网络系统或产品未正确过滤其中的特殊元素。攻击者可利用该漏洞生成非法的代码段，修改网络系统或组件的预期的执行控制流。
CVSS Information
N/A
Vulnerability Type
N/A