CVE-2012-0333: Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication...

Security readout for executives and security teams

CVE-2012-0333 affects Cisco Small Business SPA 500 series IP phones running firmware 7.4.9 or earlier. The phones could accept Push XML requests without authentication, allowing a remote attacker to make calls through the device. Business risk is mainly toll fraud, misuse of phone lines, and operational disruption. Exposure is most likely where affected SPA 500 series phones are still deployed and reachable from untrusted networks, guest networks, VPN users, or compromised internal hosts. Internet exposure would raise urgency, but the source bundle does not confirm common exposure patterns. Handle as a targeted telecom abuse risk, especially if legacy SPA 500 phones remain in use. It is not supported by evidence of active exploitation, but unauthenticated call placement can create direct financial and operational impact. Mitigation focus: Inventory Cisco Small Business SPA 500 series phones and firmware versions.; Prioritize any devices running firmware 7.4.9 or earlier.; Review Cisco release notes and support guidance for fixed firmware..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.