CVE-2015-0670

Cisco Small Business SPA300 and SPA500 IP phones running firmware version 7.5.5 are affected by CVE-2015-0670 due to improper authentication in the default configuration. A crafted XML request can allow an unauthenticated remote attacker to read audio-stream data or originate telephone calls. The...

PT-2015-4797

Name of the Vulnerable Software and Affected Versions Cisco Small Business IP phones SPA 300 version 7.5.5 Cisco Small Business IP phones SPA 500 version 7.5.5 Description The default configuration of the affected devices does not properly support authentication. This allows remote attackers to...

CVE-2015-0670: Improper Authentication

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482...

Cisco Small Business SPA300 and SPA500 Series IP Phones Unauthenticated Remote Dial Vulnerability

A vulnerability in the firmware of the Cisco Small Business SPA 300 and 500 series IP phones could allow an unauthenticated, remote attacker to listen to the audio stream of an IP phone. The vulnerability is due to improper authentication settings in the default configuration. An attacker could...

CVE-2015-0601

Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allow local users to cause a denial of service device reload via crafted commands, aka Bug ID CSCup92790...

CVE-2015-0601

CVE-2015-0601 affects Cisco Unified IP Phone 9900 Series, with firmware 9.4(.1) and earlier. The vulnerability stems from insufficient input validation in processing crafted commands, allowing an authenticated local attacker to cause a denial of service (device reload). Impact is restricted to lo...

Snom IP Phones has multiple vulnerabilities

Snom IP Phones is an IP phone system. Snom IP Phones suffers from multiple cross-site scripting vulnerabilities, HTML injection vulnerabilities, directory traversal vulnerabilities, command execution vulnerabilities, authentication bypass vulnerabilities, multiple cross-site request forgery...

Snom IP Phones - Multiple Vulnerabilities

Snom IP phones with firmware versions prior to 8.7.5.15 suffer from authentication bypass, command execution, cross site request forgery, cross site scripting, privilege escalation, and directory traversal vulnerabilities. title: Multiple critical vulnerabilities product: snom IP phones vulnerabl...

SEC Consult SA-20150113-0 :: Multiple critical vulnerabilities in all snom desktop IP phones

SEC Consult Vulnerability Lab Security Advisory 20150113-0 ======================================================================= title: Multiple critical vulnerabilities product: snom IP phones vulnerable version: all firmware versions 8.7.5.15, all firmware branches of all snom desktop IP phon...

Multiple snom IP phones vulnerabilities

Crossite scripting, CSRF, directory traversal, authentication bypass, privilege escalation, code execution, backdoor access...

Snom IP Phones XSS / CSRF / Traversal / Escalation / Command Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: snom IP phones vulnerable version: all firmware versions 8.7.5.15, all firmware branches of all snom desktop IP phones 3xx, 7xx...

Cisco Small Business SPA300 and SPA500 Series IP Phones Cross-Site Scripting Vulnerability

A vulnerability in the web user interface of the Cisco Small Business SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could...

Cisco Small Business SPA300 and SPA500 Series IP Phones Local Code Execution Vulnerability

A vulnerability in the Cisco Small Business SPA300 and SPA500 Series IP Phones could allow an unauthenticated, local attacker to access the debug shell and file system of the affected device. The vulnerability is due to insufficient authentication implementation in the debug console interface. An...

BlackBerry, Cisco Products Vulnerable to OpenSSL Bug

Vendors are continuing to check their products for potential effects from the OpenSSL heartbleed vulnerability, and both Cisco and BlackBerry have found that a variety of their products contain a vulnerable version of the software. BlackBerry on Thursday said that several of its software products...

Avaya多个IP电话命令注入和栈缓冲区溢出漏洞

Bugtraq ID:65842 Avaya IP Phones是IP电话系统。 Avaya多个IP Phones存在命令注入和基于栈的缓冲区溢出漏洞，允许远程攻击者利用漏洞使应用程序崩溃或执行任意shell命令。 0 Avaya IP Phones 厂商补丁： Avaya ----- 用户可参考如下厂商提供的安全补丁以修复该漏洞： http://www.avaya.com/...

CVE-2014-0658

Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service unregistration via a crafted SIP header, aka Bug ID CSCul24898...

CVE-2014-0658

Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service unregistration via a crafted SIP header, aka Bug ID CSCul24898...

CVE-2014-0658

CVE-2014-0658 affects Cisco 9900 Series Unified IP Phones . The issue arises in SIP header processing, where a crafted SIP header can cause the device to unregister, producing a denial-of-service condition. Public sources consistently identify the vulnerability as CSCul24898. Exploitation details...

CVE-2014-0658: Improper Input Validation

Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service unregistration via a crafted SIP header, aka Bug ID CSCul24898...

PT-2014-3753

Name of the Vulnerable Software and Affected Versions Cisco 9900 Unified IP phones affected versions not specified Description The issue allows remote attackers to cause a denial of service, specifically unregistration, by sending a crafted SIP header. Recommendations At the moment, there is no...