Lucene search
HistoryMay 02, 2012 - 10:09 a.m.
CVE-2012-0333
cisco
ip phones
spa 500 series
authentication bypass
remote attack
xml
cve-2012-0333
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.3 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.8%
Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768.
Affected configurations
Node
ciscosmall_business_ip_phone_firmwareRange≤7.4.9
ORciscosmall_business_ip_phone_firmwareMatch7.1.7
ORciscosmall_business_ip_phone_firmwareMatch7.2.5
ORciscosmall_business_ip_phone_firmwareMatch7.3.5
ORciscosmall_business_ip_phone_firmwareMatch7.4.3
ORciscosmall_business_ip_phone_firmwareMatch7.4.4
ORciscosmall_business_ip_phone_firmwareMatch7.4.5
ORciscosmall_business_ip_phone_firmwareMatch7.4.6
ORciscosmall_business_ip_phone_firmwareMatch7.4.7
ORciscosmall_business_ip_phone_firmwareMatch7.4.8
ciscosmall_business_ip_phoneMatchspa525g
ORciscosmall_business_ip_phoneMatchspa525g2
Related
nvd
nvd
CVE-2012-0333
2012-05-02 10:09:21
prion
prion
Authentication flaw
2012-05-02 10:09:00
cvelist
cvelist
CVE-2012-0333
2012-05-02 10:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.3 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.8%
Related for CVE-2012-0333