CVE:CVE-2015-6403
CNNVD:CNNVD-201512-175
Cisco Small Business SPA30x、SPA50x和SPA51x都是美国思科（Cisco）公司的S系列的IP电话产品。
多款Cisco IP Phones产品的TFTP实现过程中存在安全漏洞，该漏洞源于程序没有正确验证firmware-image文件完整性。本地攻击者可借助shell访问利用该漏洞加载Trojan horse镜像。以下产品受到影响：Cisco SPA30X Series IP Phones，SPA50X Series IP Phones，SPA51X Series IP Phones。
solution:Upgrade cisco spa500_firmware to a higher version than 7.5.7,and avoid the version 7.5.7; Upgrade cisco spa300_firmware to a higher version than 7.5.7,and avoid the version 7.5.7