medium4.3
CVE-2014-3313
Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary…
Impact
Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Spa 301 1 Line Ip Phone | All versions |
| Cisco | Spa 303 3 Line Ip Phone | All versions |
| Cisco | Spa 501g 8-Line Ip Phone | All versions |
| Cisco | Spa 502g 1-Line Ip Phone | All versions |
| Cisco | Spa 504g 4-Line Ip Phone | All versions |
| Cisco | Spa 508g 8-Line Ip Phone | All versions |
| Cisco | Spa 509g 12-Line Ip Phone | All versions |
| Cisco | Spa 512g 1-Line Ip Phone | All versions |
| Cisco | Spa 514g 4-Line Ip Phone | All versions |
| Cisco | Spa 525g 5-Line Ip Phone | All versions |
| Cisco | Spa 525g2 5-Line Ip Phone | All versions |
| Cisco | Spa901 1-Line Ip Phone | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/59808
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3313
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34885
- http://www.securityfocus.com/bid/68464
- http://www.securitytracker.com/id/1030553
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94422
- http://secunia.com/advisories/59808
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3313
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34885
- http://www.securityfocus.com/bid/68464
- http://www.securitytracker.com/id/1030553
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94422