CVE-2014-3312
Cisco Spa 301 1 Line IP Phone - Authentication Bypass
Title source: ruleDescription
The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.
References (4)
Scores
EPSS
0.0005
EPSS Percentile
15.9%
Classification
CWE
CWE-287
Status
draft
Affected Products (16)
cisco/spa_301_1_line_ip_phone
cisco/spa_303_3_line_ip_phone
cisco/spa_501g_8-line_ip_phone
cisco/spa_502g_1-line_ip_phone
cisco/spa_504g_4-line_ip_phone
cisco/spa_508g_8-line_ip_phone
cisco/spa_509g_12-line_ip_phone
cisco/spa_512g_1-line_ip_phone
cisco/spa_514g_4-line_ip_phone
cisco/spa_525g_5-line_ip_phone
cisco/spa_525g2_5-line_ip_phone
cisco/spa901_1-line_ip_phone
cisco/spa922_1-line_ip_phone_with_1-port_ethernet
cisco/spa941_4-line_ip_phone_with_1-port_ethernet
cisco/spa942_4-line_ip_phone_with_2-port_switch
... and 1 more
Timeline
Published
Jul 09, 2014
Tracked Since
Feb 18, 2026