Lucene search

[email protected]NVD:CVE-2014-3312

HistoryJul 09, 2014 - 11:07 a.m.

CVE-2014-3312

2014-07-0911:07:01

CWE-287

[email protected]

web.nvd.nist.gov

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.0%

JSON

The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.

Affected configurations

NVD

Node

ciscospa_301_1_line_ip_phone

ciscospa_303_3_line_ip_phone

ciscospa_501g_8-line_ip_phone

ciscospa_502g_1-line_ip_phone

ciscospa_504g_4-line_ip_phone

ciscospa_508g_8-line_ip_phone

ciscospa_509g_12-line_ip_phone

ciscospa_512g_1-line_ip_phone

ciscospa_514g_4-line_ip_phone

ciscospa_525g_5-line_ip_phone

ciscospa_525g2_5-line_ip_phone

ciscospa901_1-line_ip_phone

ciscospa922_1-line_ip_phone_with_1-port_ethernet

ciscospa941_4-line_ip_phone_with_1-port_ethernet

ciscospa942_4-line_ip_phone_with_2-port_switch

ciscospa962_6-line_ip_phone_with_2-port_switch

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3312

www.securityfocus.com/bid/68465

www.securitytracker.com/id/1030552

exchange.xforce.ibmcloud.com/vulnerabilities/94421

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.0%

JSON

Related for NVD:CVE-2014-3312

prion1 cisco1 cve1 cvelist1 thn1