CVE-2015-0670

Name of the Vulnerable Software and Affected Versions Cisco Small Business IP phones SPA 300 version 7.5.5 Cisco Small Business IP phones SPA 500 version 7.5.5

Description The default configuration of the affected devices does not properly support authentication. This allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request.

Recommendations For Cisco Small Business IP phones SPA 300 version 7.5.5, update the configuration to properly support authentication. For Cisco Small Business IP phones SPA 500 version 7.5.5, update the configuration to properly support authentication.