CVE-2015-6403 Other in n/a

High 7.2 Published 15 Dec 2015 Updated 6 Aug 2024

Local attackers with shell access can load malicious firmware on Cisco SPA phones due to improper integrity validation, enabling code execution.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2015-6403?

CVE-2015-6403 is a high-severity vulnerability in n/a, published on 15 Dec 2015. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400.

Weakness: CWE-20

Which versions are affected by CVE-2015-6403?

It affects 2 products.

Products include Cisco Spa300 Firmware, Cisco Spa500 Firmware.

How do I fix CVE-2015-6403?

No fix has been published for CVE-2015-6403 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-6403 being exploited?

There is no known exploitation of CVE-2015-6403 in the wild and no public exploit code.

Sources

Also known as GHSA-9rwf-hg9h-2rpm.