← Terug naar CVE-database
Beschrijving
The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.
Affected products
Spa 301 1 Line Ip Phone
Spa 303 3 Line Ip Phone
Spa 501g 8-line Ip Phone
Spa 502g 1-line Ip Phone
Spa 504g 4-line Ip Phone
Spa 508g 8-line Ip Phone
Spa 509g 12-line Ip Phone
Spa 512g 1-line Ip Phone
Spa 514g 4-line Ip Phone
Spa 525g 5-line Ip Phone
Spa 525g2 5-line Ip Phone
Spa901 1-line Ip Phone
Spa922 1-line Ip Phone With 1-port Ethernet
Spa941 4-line Ip Phone With 1-port Ethernet
Spa942 4-line Ip Phone With 2-port Switch
Spa962 6-line Ip Phone With 2-port Switch