Karel IP Phone IP1211 vulnerabilities

1 known vulnerability in Karel IP Phone IP1211 from Karel. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  Karel IP Phone IP1211: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-34023Jun 20, 2025KarelEPSS 1.58%

  A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx endpoint fails to properly sanitize user input to the page parameter, allowing remote authenticated attackers to access arbitrary files on the