Lucene search
HistoryJul 09, 2014 - 11:07 a.m.
CVE-2014-3313
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.7%
Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.
Affected configurations
Node
ciscospa_301_1_line_ip_phone
ORciscospa_303_3_line_ip_phone
ORciscospa_501g_8-line_ip_phone
ORciscospa_502g_1-line_ip_phone
ORciscospa_504g_4-line_ip_phone
ORciscospa_508g_8-line_ip_phone
ORciscospa_509g_12-line_ip_phone
ORciscospa_512g_1-line_ip_phone
ORciscospa_514g_4-line_ip_phone
ORciscospa_525g_5-line_ip_phone
ORciscospa_525g2_5-line_ip_phone
ORciscospa901_1-line_ip_phone
ORciscospa922_1-line_ip_phone_with_1-port_ethernet
ORciscospa941_4-line_ip_phone_with_1-port_ethernet
ORciscospa942_4-line_ip_phone_with_2-port_switch
ORciscospa962_6-line_ip_phone_with_2-port_switch
Related
prion
prion
Cross site scripting
2014-07-09 11:07:00
cisco
cisco
cve
cve
CVE-2014-3313
2014-07-09 11:07:01
cvelist
cvelist
CVE-2014-3313
2014-07-09 10:00:00
thn
thn
Cisco IP Phones Vulnerable To Remote Eavesdropping
2015-03-23 06:18:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.7%
Related for NVD:CVE-2014-3313