Unscored CVE-2014-3312 EUVD-2014-3325GHSA-xgrh-89p6-c4pw

The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local u…

Published Jul 9, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.

References

1030552 vdb-entry
20140708 Cisco Small Business SPA300 and SPA500 Series IP Phones Local Code Execution Vulnerability vendor-advisory
cisco-small-cve20143312-code-exec(94421) vdb-entry
68465 vdb-entry