CVE-2015-6403

Currently unrated

Key Information:

Vendor
Cisco
Status
Spa500 Firmware
Vendor
CVE Published:
15 December 2015

Summary

The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400.

References

http://www.securitytracker.com/id/1034376
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/78739
vdb-entryx_refsource_BID
http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.