{
  "id": "CVE-2015-6403",
  "sourceIdentifier": "ykramarz@cisco.com",
  "published": "2015-12-15T05:59:04.853",
  "lastModified": "2016-12-07T18:20:00.803",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400."
    },
    {
      "lang": "es",
      "value": "La implementaci\u00f3n TFTP en tel\u00e9fonos Cisco Small Business SPA30x, SPA50x, SPA51x 7.5.7 no valida adecuadamente la integridad del archivo de imagen de firmware, lo que permite a usuarios locales cargar una imagen de un Troyano mediante el aprovechamiento de acceso shell, tambi\u00e9n conocido como Bug ID CSCut67400."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "accessVector": "LOCAL",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:spa500_firmware:7.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "2173CEC8-8B88-404C-8526-98CB39F9A954"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_500ds:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "37E3C90F-011D-454C-8E0C-92E72A6EFE1D"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_500s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "90C72E35-F124-4D09-AA68-0678ACBA590D"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_501g:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A258316-4DB6-47AC-90C0-CB9EF777E151"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_502g:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D5DF893E-7E9E-419B-8E7C-E846333646BA"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_504g:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F78AAB2-8ECD-4FAA-8A2A-9035F5C59597"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_508g:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B26A21E-CD32-4DED-8A31-4CCA1C4DD642"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_509g:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A4373DD-753A-46A6-BB96-0488EA52157E"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_512g:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CBA0C4D-4BB6-455D-8355-F4FACC5D721C"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_514g:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "97551DEA-85F9-4A38-A8AC-F477CB7ABC2C"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_525g2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BD59A7B-751C-487B-957A-90B5BAEAE3BF"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:spa300_firmware:7.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7423475-9BDC-4425-9B88-77F2F539131A"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_301:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8CE3C04F-884C-4CD1-8503-DB60CCC1B1F3"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:spa_303:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F04B0F29-5620-4714-A151-7CDA2B9D8F2F"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-ipp",
      "source": "ykramarz@cisco.com",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/bid/78739",
      "source": "ykramarz@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1034376",
      "source": "ykramarz@cisco.com"
    }
  ]
}