CVE-2015-6403 : The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.

The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400.

Published 2015-12-15 05:59:05

Updated 2016-12-07 18:20:01

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Input validation

Products affected by CVE-2015-6403

Cisco » Spa300 Firmware » Version: 7.5.7
cpe:2.3:o:cisco:spa300_firmware:7.5.7:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Spa 301 » Version: N/A
When used together with: Cisco » Spa 303 » Version: N/A
Cisco » Spa500 Firmware » Version: 7.5.7
cpe:2.3:o:cisco:spa500_firmware:7.5.7:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Spa 500ds » Version: N/A
When used together with: Cisco » Spa 500s » Version: N/A
When used together with: Cisco » Spa 501g » Version: N/A
When used together with: Cisco » Spa 502g » Version: N/A
When used together with: Cisco » Spa 504g » Version: N/A
When used together with: Cisco » Spa 508g » Version: N/A
When used together with: Cisco » Spa 509g » Version: N/A
When used together with: Cisco » Spa 512g » Version: N/A
When used together with: Cisco » Spa 514g » Version: N/A
When used together with: Cisco » Spa 525g2 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2015-6403

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-6403

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2015-6403

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-6403

http://www.securitytracker.com/id/1034376

Cisco SPA30X, SPA50X, and SPA51X Series IP Phones File Integrity Check Flaw Lets Local Users Load Arbitrary Firmware Images - SecurityTracker
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-ipp

Multiple Cisco IP Phones Firmware Image Upload Vulnerability
Vendor Advisory
http://www.securityfocus.com/bid/78739

Multiple Cisco IP Phones CVE-2015-6403 Local Arbitrary File Upload Vulnerability

Jump to

Vulnerability Details : CVE-2015-6403

Products affected by CVE-2015-6403

Exploit prediction scoring system (EPSS) score for CVE-2015-6403

CVSS scores for CVE-2015-6403

CWE ids for CVE-2015-6403

References for CVE-2015-6403