CVE-2012-0333

MEDIUM · CVSS 5 EPSS 1.08%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-05-02 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2012-0333

Severity

MEDIUM

CVSS

EPSS

1.08%

Cisco

Original Filing — NVD Description

Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768.