cisco / spa922_1-line_ip_phone_with_1-port_ethernet CVEs

Beta · best-effort

2 CVEs tagged to cisco / spa922_1-line_ip_phone_with_1-port_ethernet — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to cisco vendor archive

CVE-2014-3313

Published Jul 9, 2014

Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML…

CVSS 4.3 · Medium

evidence mentions: 3
Buzz score: 21.9

Vendor/product tagsBeta · best-effort

CVE-2014-3312

Published Jul 9, 2014

The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell co…

CVSS 6.9 · Medium

evidence mentions: 3
Buzz score: 21.9

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1