PT-2015-4797
CVE-2015-0670
·
تاريخ النشر
2015-03-21
·
تاريخ التحديث
2015-10-22
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Cisco Small Business IP phones SPA 300 version 7.5.5
Cisco Small Business IP phones SPA 500 version 7.5.5
Description
The default configuration of the affected devices does not properly support authentication. This allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request.
Recommendations
For Cisco Small Business IP phones SPA 300 version 7.5.5, update the configuration to properly support authentication.
For Cisco Small Business IP phones SPA 500 version 7.5.5, update the configuration to properly support authentication.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾