1 results (0.008 seconds)

CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0

19 Sep 2024 — Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function. • http://tiptel.com • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •