CVE-2016-1435

CVE-2016-1435 describes a local privilege escalation vulnerability in Cisco 8800 series IP phones running software version 11.0(1). The flaw stems from improper enforcement of mounted-filesystem permissions, allowing an authenticated local attacker with shell access to write to arbitrary files. This vulnerability carries a CVSSv3 score of 7.0 (High), indicating a significant impact with high confidentiality, integrity, and availability compromise, albeit requiring local access and high attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.