NVD

Id
42463  
Name
CVE-2012-0333  
Description
Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-05-02  
Modified Date
2012-10-30  
Seq
2012-0333  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214048 42463 CVE-2012-0333 http://www-europe.cisco.com/en/US/docs/voice_ip_comm/csbpipp/ip_phones/release/notes/spa525g_relnote_7_5_1.pdf  View
214049 42463 CVE-2012-0333 1027012  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26494 JVNDB-2012-002201 Cisco Small Business IP Phone の SPA 500 シリーズファームウェアにおける電話をかけられる脆弱性 Cisco Small Business IP Phone の SPA 500 シリーズファームウェアは、Push XML リクエストに対して認証を要求しないため、電話をかけられる脆弱性が存在します。 CVE-2012-0333 53571 CVE-2012-0333 42463 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002201.html 2012-05-02 2012-05-08 View