CVE-2019-12326

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a manipulated ringtone file, with an executable payload (shell commands within the file) and trigger code execution.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Akuvox_R50P.pdfExploit, Third Party Advisory
https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Akuvox_R50P.pdfExploit, Third Party Advisory

Timeline

Published: Jul 22, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-123279.8Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service CVE-2019-123288.8A command injection (missing input validation) issue in the remote phonebook configuration URI in the web interface of the Atcom A10W VoIP p CVE-2019-12337.5A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory,CVE-2019-123318.8PHPOffice PhpSpreadsheet before 1.8.0 has an XXE issue. The XmlScanner decodes the sheet1.xml from an .xlsx to utf-8 if something else than CVE-2019-12347.5A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'.CVE-2019-123456.1XSS exists in the Kiboko Hostel plugin before 1.1.4 for WordPress.CVE-2019-123466.1In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially cr CVE-2019-123476.1In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acme_accoun CVE-2019-123489.8An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter.CVE-2019-123499.8An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.CVE-2019-12357.8An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server process does not validate the sou CVE-2019-123509.8An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trailing comma.