CVE-2014-3312 in Cisco IP Phone
Resumen (Inglés)
The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.
Reservar
2014-05-07
Divulgación
2014-07-09
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 67042 | Cisco IP Phone autenticación débil | 287 | No probado | Unavailable | CVE-2014-3312 |