CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005.
| Software | From | Fixed in |
|---|---|---|
| cisco / ip_phone_8800_series_firmware | 10.2(2) | 10.2(2).x |
| cisco / ip_phone_8800_series_firmware | 11.0(1) | 11.0(1).x |
| cisco / ip_phone_8800_series_firmware | 10.2(1) | 10.2(1).x |
| cisco / ip_phone_8800_series_firmware | 10.3 | 10.3.x |
| cisco / ip_phone_8800_series_firmware | 10.3(2) | 10.3(2).x |