Tracker / CVE-2014-3312
CVE-2014-3312
Medium 6.9
The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.
Affected products and versions
| cisco | spa901_1-line_ip_phone |
|---|---|
| cisco | spa922_1-line_ip_phone_with_1-port_ethernet |
| cisco | spa941_4-line_ip_phone_with_1-port_ethernet |
| cisco | spa942_4-line_ip_phone_with_2-port_switch |
| cisco | spa962_6-line_ip_phone_with_2-port_switch |
| cisco | spa_301_1_line_ip_phone |
| cisco | spa_303_3_line_ip_phone |
| cisco | spa_501g_8-line_ip_phone |
| cisco | spa_502g_1-line_ip_phone |
| cisco | spa_504g_4-line_ip_phone |
| cisco | spa_508g_8-line_ip_phone |
| cisco | spa_509g_12-line_ip_phone |
| cisco | spa_512g_1-line_ip_phone |
| cisco | spa_514g_4-line_ip_phone |
| cisco | spa_525g2_5-line_ip_phone |
| cisco | spa_525g_5-line_ip_phone |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.