CVEvulnerability

CVE-2014-3313

4.3 MEDIUM Published 2014-07-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.

Affected configurations

• cisco spa 301 1 line ip phone • cisco spa 303 3 line ip phone • cisco spa 501g 8-line ip phone • cisco spa 502g 1-line ip phone • cisco spa 504g 4-line ip phone • cisco spa 508g 8-line ip phone • cisco spa 509g 12-line ip phone • cisco spa 512g 1-line ip phone • cisco spa 514g 4-line ip phone • cisco spa 525g 5-line ip phone • cisco spa 525g2 5-line ip phone • cisco spa901 1-line ip phone • cisco spa922 1-line ip phone with 1-port ethernet • cisco spa941 4-line ip phone with 1-port ethernet • cisco spa942 4-line ip phone with 2-port switch • cisco spa962 6-line ip phone with 2-port switch

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References