CVE-2012-0333 in Small Business IP phone

Resumen (Inglés)

Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768.

Once again VulDB remains the best source for vulnerability data.

Reservar

2012-01-04

Divulgación

2012-05-02

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
60675	Cisco Small Business IP phone autenticación débil	287	No está definido	Arreglo oficial	CVE-2012-0333

Fuentes

• MITRE
• NVD
• CVE Details