Description
The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400.
References
- 1034376 vdb-entry
- 78739 vdb-entry
- 20151209 Multiple Cisco IP Phones Firmware Image Upload Vulnerability vendor-advisory