CVE:CVE-2021-34711
CNNVD:CNNVD-202110-303
Cisco IP Phone是美国思科（Cisco）公司的一个硬件设备。提供通话功能的IP电话。
Cisco IP Phone 存在路径遍历漏洞，该漏洞源于输入验证不足。攻击者可以通过向调试 shell 命令提供精心设计的输入来利用此漏洞。成功的利用可能允许攻击者读取设备文件系统上的任何文件。
solution:Upgrade cisco ip_conference_phone_7832_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_conference_phone_8832_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_7811_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_7821_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_7832_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_7841_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_7861_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_8811_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_8831_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phones_8832_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_8841_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_8845_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_8851_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_8861_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco ip_phone_8865_firmware to a higher version than 14.1\(1\,and avoid the version (,14.1\(1\)); Upgrade cisco wireless_ip_phone_8821_firmware to a higher version than 11.0\(6\sr2,and avoid the version (,11.0\(6\)sr2)