CVE-2019-15959
Medium
Description
A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker could exploit this vulnerability by accessing the physical interface of a device and inserting a USB storage device. A successful exploit could allow the attacker to execute scripts on the device in an elevated security context.
SeverityMedium
CVSS6.6
Exploit probability—
Product
Cisco Spa500 Series Ip Phones Firmware
PublishedSep 23, 2020
First seenSep 23, 2020
Weakness typeCWE-20Improper input validation
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco spa500_series_ip_phones_firmware | v ≤ 7.5.7\(5\) | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.