CVE-2015-0670

https://notcve.org/view.php?id=CVE-2015-0670

21 Mar 2015 — The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482. La configuración por defecto de Cisco Small Business IP phones SPA 300 7.5.5 y SPA 500 7.5.5 no soporta adecuadamente autenticación, lo que permite a atacantes remotos leer flujo de datos de audio o originar llamadas de teléfono a través de un... • http://tools.cisco.com/security/center/viewAlert.x?alertId=37946 • CWE-287: Improper Authentication •