CVE-2015-0670: The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not proper...

Security readout for executives and security teams

Some Cisco Small Business SPA300 and SPA500 IP phones running version 7.5.5 could allow a remote unauthenticated attacker to listen to audio-stream data or make calls through the phone. The issue is tied to default configuration and an XML request path. Active exploitation is not documented in the provided sources. Exposure is most likely where affected SPA300 or SPA500 phones on version 7.5.5 are reachable by untrusted networks and still use the vulnerable default configuration. The source bundle does not identify other affected firmware versions or products. Prioritize remediation for internet-reachable or broadly reachable office phones. The business impact can include privacy exposure from audio streams and unauthorized call origination. Urgency is high for exposed systems, but exploitation evidence is incomplete. Mitigation focus: Review Cisco advisory 37946 for official configuration or firmware guidance.; Inventory SPA300 and SPA500 phones running firmware version 7.5.5.; Remove affected phone interfaces from untrusted network reachability where possible..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.