The CSCve12309 claims Cisco Small Business Voice Gateways and ATAs to be affected products only.
I would like to notice that Small Business SPA500 Series IP Phones (SPA501G, SPA502G, SPA504G, SPA508G, SPA509G, SPA512G, SPA514G, SPA525G) and Small Business SPA300 Series IP Phones (SPA301, SPA303) are affected as well. Speaking about most recent firmware (7.6.2SR2) of course.