CVE-2016-1435: Cisco IP Phone 8800 Series Firmware

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Cisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014.

Affected products

  • Cisco IP Phone 8800 Series Firmware: version 11.0(1) only

Published 2016-06-23. Last modified 2026-06-17.