VULNERABILITY INTELLIGENCE
CVE-2014-3312
CVSS score6.9 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2014-07-09
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Description
The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.
Weakness classification
- CWE-287: Improper Authentication