Cisco

Spa942 4-line Ip Phone With 2-port Switch

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.9

CVE-2014-3312

  • EPSS 0.05%
  • Published 09.07.2014 11:07:01
  • Last modified 12.04.2025 10:46:40

The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct ac...

4.3

CVE-2014-3313

  • EPSS 0.5%
  • Published 09.07.2014 11:07:01
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.