tiptel_ip_286_firmware vulnerabilities
1 known vulnerability in tiptel_ip_286_firmware from Ergophone. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
tiptel_ip_286_firmware: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.