Security Advisory
CVE-2019-12326
7.2
HIGH
Vulnerability Description
Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a manipulated ringtone file, with an executable payload (shell commands within the file) and trigger code execution.
Published Date
July 22, 2019
Official Source
NIST NVD Advisory