CVE-2014-3312 in Cisco IP Phone
Сводка (Английский)
The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.
Резервировать
07.05.2014
Раскрытие
09.07.2014
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 67042 | Cisco IP Phone слабая аутентификация | 287 | недоказанный | Unavailable | CVE-2014-3312 |