CWE Code: 22
Vulnerability Type: privilege_escalation
CVSS Score: 7.7
CWE Name:  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary: the diagnostics web interface in the yeahlink ultra-elegant ip phone sip-t41p (firmware 66.83.0.35) does not validate (escape) the path information (path traversal), which allows an authenticated remote attacker to get access to privileged information (e.g., /etc/passwd) via path traversal (relative path information in the file parameter of the corresponding post request).
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-05-29
Last Modified Date: 2019-05-30