Default configuration

2015-03-2101:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.7%

JSON

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482.

CPENameOperatorVersion
spa300_firmwareeq7.5.5
spa500_firmwareeq7.5.5

CPE	Name	Operator	Version
	spa300_firmware	eq	7.5.5
	spa500_firmware	eq	7.5.5

References

tools.cisco.com/security/center/viewAlert.x?alertId=37946

www.securitytracker.com/id/1031969