The vulnerability of the microprogramming software of Cisco Small Business SPA500 Series IP phones, related to insufficient cleaning of input data, allows a hacker to execute arbitrary code with administrator privileges.

The vulnerability of the microprogramming software of Cisco Small Business SPA500 Series phones is related to insufficient cleaning of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code with administrator privileges...

CVE-2014-3312

The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435...