CVE-2014-3312

The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute…

published July 9, 2014

CVSS
—
EPSS
0%
Percentile
29.4
In the wild
Unconfirmed
What it is

The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00368 · 29.4th percentile
Published
2014-07-09T10:00Z
EPSS history
Timeline
  • 09 JUL 10:00Z
    The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute…
    cvelistv5