CVE-2019-12326
Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a manipulated ringtone file, with an execu…
Published: 2019-07-22 · CVSS: 7.2 · CVSS 3.0
Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a manipulated ringtone file, with an executable payload (shell commands within the file) and trigger code execution.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7