Lucene search

[email protected]CVE-2015-0670

HistoryMar 21, 2015 - 1:59 a.m.

CVE-2015-0670

2015-03-2101:59:01

CWE-287

[email protected]

web.nvd.nist.gov

cisco

small business

ip phones

spa 300

spa 500

authentication bypass

bug id cscuo52482

cve-2015-0670

nvd

6.8 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

71.5%

JSON

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482.

Affected configurations

NVD

Node

ciscospa500_firmwareMatch7.5.5

AND

ciscospa_501g_8-line_ip_phone

ciscospa_502g_1-line_ip_phone

ciscospa_504g_4-line_ip_phone

ciscospa_508g_8-line_ip_phone

ciscospa_509g_12-line_ip_phone

ciscospa_512g_1-line_ip_phone

ciscospa_514g_4-line_ip_phone

ciscospa_525g_5-line_ip_phone

ciscospa_525g2_5-line_ip_phone

Node

ciscospa300_firmwareMatch7.5.5

AND

ciscospa_301_1_line_ip_phone

ciscospa_302d

ciscospa_302dkit

ciscospa_303_3_line_ip_phone

CPENameOperatorVersion
cisco:spa500_firmwarecisco spa500 firmwareeq7.5.5
cisco:spa_501g_8-line_ip_phonecisco spa 501g 8-line ip phoneeq*
cisco:spa_502g_1-line_ip_phonecisco spa 502g 1-line ip phoneeq*
cisco:spa_504g_4-line_ip_phonecisco spa 504g 4-line ip phoneeq*
cisco:spa_508g_8-line_ip_phonecisco spa 508g 8-line ip phoneeq*
cisco:spa_509g_12-line_ip_phonecisco spa 509g 12-line ip phoneeq*
cisco:spa_512g_1-line_ip_phonecisco spa 512g 1-line ip phoneeq*
cisco:spa_514g_4-line_ip_phonecisco spa 514g 4-line ip phoneeq*
cisco:spa_525g_5-line_ip_phonecisco spa 525g 5-line ip phoneeq*
cisco:spa_525g2_5-line_ip_phonecisco spa 525g2 5-line ip phoneeq*

CPE	Name	Operator	Version
cisco:spa500_firmware	cisco spa500 firmware	eq	7.5.5
cisco:spa_501g_8-line_ip_phone	cisco spa 501g 8-line ip phone	eq	*
cisco:spa_502g_1-line_ip_phone	cisco spa 502g 1-line ip phone	eq	*
cisco:spa_504g_4-line_ip_phone	cisco spa 504g 4-line ip phone	eq	*
cisco:spa_508g_8-line_ip_phone	cisco spa 508g 8-line ip phone	eq	*
cisco:spa_509g_12-line_ip_phone	cisco spa 509g 12-line ip phone	eq	*
cisco:spa_512g_1-line_ip_phone	cisco spa 512g 1-line ip phone	eq	*
cisco:spa_514g_4-line_ip_phone	cisco spa 514g 4-line ip phone	eq	*
cisco:spa_525g_5-line_ip_phone	cisco spa 525g 5-line ip phone	eq	*
cisco:spa_525g2_5-line_ip_phone	cisco spa 525g2 5-line ip phone	eq	*