WID-SEC-W-2023-1840

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Cisco Small Business SPA500 Series IP Phones.: Mehrere Schwachstellen

view advisory published 2023-07-19

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Small Business SPA500 Series IP Phones. ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und Daten zu manipulieren.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-20218USmedium6.1—
A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to to modify a web page in t…
CVE-2023-20181USmedium6.1—
A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct XSS attacks. This v…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan