CVE-2015-0670

2015-03-2101:00:00

cisco

www.cve.org

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.7%

JSON

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482.