Tracker / CVE-2014-3313
CVE-2014-3313
Medium 4.3
Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.
Affected products and versions
| cisco | spa901_1-line_ip_phone |
|---|---|
| cisco | spa922_1-line_ip_phone_with_1-port_ethernet |
| cisco | spa941_4-line_ip_phone_with_1-port_ethernet |
| cisco | spa942_4-line_ip_phone_with_2-port_switch |
| cisco | spa962_6-line_ip_phone_with_2-port_switch |
| cisco | spa_301_1_line_ip_phone |
| cisco | spa_303_3_line_ip_phone |
| cisco | spa_501g_8-line_ip_phone |
| cisco | spa_502g_1-line_ip_phone |
| cisco | spa_504g_4-line_ip_phone |
| cisco | spa_508g_8-line_ip_phone |
| cisco | spa_509g_12-line_ip_phone |
| cisco | spa_512g_1-line_ip_phone |
| cisco | spa_514g_4-line_ip_phone |
| cisco | spa_525g2_5-line_ip_phone |
| cisco | spa_525g_5-line_ip_phone |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.