CVE:CVE-2012-0333
CNNVD:CNNVD-201205-047
Cisco Small Business IP phones with SPA 500系列防火墙7.4.9及之前版本中存在漏洞，该漏洞源于未要求Push XML请求验证。远程攻击者可利用该漏洞借助XML文档拨打电话，也称Bug ID CSCts08768。
solution:Upgrade cisco small_business_ip_phone_firmware to a higher version than 7.4.9,7.1.7,7.2.5,7.3.5,7.4.3,7.4.4,7.4.5,7.4.6,7.4.7,7.4.8,and avoid the version (,7.4.9],7.1.7,7.2.5,7.3.5,7.4.3,7.4.4,7.4.5,7.4.6,7.4.7,7.4.8; Upgrade cisco small_business_ip_phone to a higher version than spa525g,spa525g2,and avoid the version spa525g,spa525g2