Auth bypass in Cisco Spa 301 1 Line Ip Phone
CVE-2014-3312
The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.
Vulnerability class: Broken Authentication
EPSS: 0.004 (29.8th percentile) — read the EPSS interpretation.
Affected products
- Cisco Spa_301_1_line_ip_phone
- Cisco Spa_303_3_line_ip_phone
- Cisco Spa_501g_8-line_ip_phone
- Cisco Spa_502g_1-line_ip_phone
- Cisco Spa_504g_4-line_ip_phone
- Cisco Spa_508g_8-line_ip_phone
- Cisco Spa_509g_12-line_ip_phone
- Cisco Spa_512g_1-line_ip_phone
- Cisco Spa_514g_4-line_ip_phone
- Cisco Spa_525g2_5-line_ip_phone
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (vdb-entry, x_refsource_BID)