CVEvulnerability

CVE-2015-6403

7.2 HIGH Published 2015-12-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-12-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400.

Affected configurations

• cisco spa500 firmware 7.5.7 • cisco spa300 firmware 7.5.7

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References