VULNERABILITY INTELLIGENCE
CVE-2015-6403
CVSS score7.2 HIGH
EPSS probability0.38%
CISA KEVNot currently listed
Published2015-12-15
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400.
Weakness classification
- CWE-20: Improper Input Validation