spa962 6-line ip phone with 2-port switch (cisco) — Vulnerabilities

Vendors · cisco · spa962 6-line ip phone with 2-port switch

spa962 6-line ip phone with 2-port switch

· 2 CVEscisco · 2 known vulnerabilities

Total

Critical

High

Medium

CISA KEV

CVE-2014-3313

Jul 9, 2014

Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.

CVE-2014-3312

Jul 9, 2014

The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.

All cisco products All Vendors CVE Database KEV Catalog