Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior

Críticas / altas1293▼ 208 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2015-0670	Modificada	Media (6.4)	1.8%	—	Cisco Spa500 Firmware Cisco SPA 501g 8-line IP Phone Cisco SPA 502g 1-line IP Phone Cisco SPA 504g 4-line IP Phone+11	21/3/2015	17/6/2026	The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482.
CVE-2014-3313	Modificada	Media (4.3)	2.0%	—	Cisco SPA 301 1 Line IP Phone Cisco SPA 303 3 Line IP Phone Cisco SPA 501g 8-line IP Phone Cisco SPA 502g 1-line IP Phone+12	9/7/2014	17/6/2026	Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.
CVE-2014-3312	Modificada	Media (6.9)	0.37%	—	Cisco SPA 301 1 Line IP Phone Cisco SPA 303 3 Line IP Phone Cisco SPA 501g 8-line IP Phone Cisco SPA 502g 1-line IP Phone+12	9/7/2014	17/6/2026	The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.