CVE:CVE-2014-3313
CNNVD:CNNVD-201407-233
Cisco Small Business SPA300和SPA500 IP Phones都是美国思科（Cisco）公司的S系列的IP电话产品。
Cisco Small Business SPA300和SPA500 IP Phones的Web用户界面中存在跨站脚本漏洞。远程攻击者可通过诱使用户点击特制的URL利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade cisco spa_301_1_line_ip_phone to a higher version than *; Upgrade cisco spa_303_3_line_ip_phone to a higher version than *; Upgrade cisco spa_501g_8-line_ip_phone to a higher version than *; Upgrade cisco spa_502g_1-line_ip_phone to a higher version than *; Upgrade cisco spa_504g_4-line_ip_phone to a higher version than *; Upgrade cisco spa_508g_8-line_ip_phone to a higher version than *; Upgrade cisco spa_509g_12-line_ip_phone to a higher version than *; Upgrade cisco spa_512g_1-line_ip_phone to a higher version than *; Upgrade cisco spa_514g_4-line_ip_phone to a higher version than *; Upgrade cisco spa_525g_5-line_ip_phone to a higher version than *; Upgrade cisco spa_525g2_5-line_ip_phone to a higher version than *; Upgrade cisco spa901_1-line_ip_phone to a higher version than *; Upgrade cisco spa922_1-line_ip_phone_with_1-port_ethernet to a higher version than *; Upgrade cisco spa941_4-line_ip_phone_with_1-port_ethernet to a higher version than *; Upgrade cisco spa942_4-line_ip_phone_with_2-port_switch to a higher version than *; Upgrade cisco spa962_6-line_ip_phone_with_2-port_switch to a higher version than *