cbcvebase.

Atcom Technology Co Ltd 100M Ip Phones vulnerabilities

1 known vulnerability affecting atcom_technology_co_ltd/100m_ip_phones.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2024-58314P2HIGHCVSS 8.8v2.72025-12-12
CVE-2024-58314 [HIGH] CWE-78 CVE-2024-58314: Atcom 100M IP Phones firmware version 2.7.x.x contains an authenticated command injection vulnerabil Atcom 100M IP Phones firmware version 2.7.x.x contains an authenticated command injection vulnerability in the web configuration CGI script that allows attackers to execute arbitrary system commands. Attackers can inject shell commands through the 'cmd' parameter in web_cgi_main.cgi, enabling remote code execution with administrative credentials.
nvd
Atcom Technology Co Ltd 100M Ip Phones vulnerabilities | cvebase