CVE:CVE-2013-5533
CNNVD:CNNVD-201310-184
Cisco 9900 IP Phones是美国思科（Cisco）公司的9900系列IP电话产品。该产品提供了语音、视频功能。
Cisco 9900 Unified IP电话中的image-upgrade功能中存在命令注入漏洞。本地攻击者可通过插入shell命令到参数，利用该漏洞在底层操作系统上下文中执行命令。
solution:Upgrade cisco unified_ip_phones_9900_series_firmware to a higher version than -; Upgrade cisco unified_ip_phone_9951 to a higher version than *; Upgrade cisco unified_ip_phone_9971 to a higher version than *