Description
A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct XSS attacks. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco Small Business IP Phones
7.6.0affected7.6.2affected7.6.2SR3affected7.6.2SR6affected7.6.2SR2affected7.6.2SR4affected7.6.2SR1affected7.6.2SR5affected7.6.2SR7affected7.6.1affected7.3.7affected7.5.5affected7.5.6(XU)affected7.5.2affected7.5.2aaffected7.5.7affected7.5.3affected7.5.6affected7.5.2baffected7.5.6caffected7.5.6aaffected7.5.7saffected7.5.1affected7.5.5aaffected7.5.5baffected7.5.4affected7.4.7affected7.4.4affected7.4.8affected7.4.3affected7.4.9affected7.4.6affected