CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.4. It affects Cisco. It may be remotely exploitable.
CVE
CVE-2015-0670
Severity
MEDIUM
CVSS
6.4
EPSS
1.75%
Cisco
Original NVD Description
The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482.