Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an attacker to execute arbitrary commands on the underlying operating system or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has not released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20452US | — | — | ||
Уязвимость веб-интерфейса микропрограммного обеспечения IP-телефонов Cisco Small Business SPA300 и SPA500 связана с копированием в буфер без проверки размера входных данных. Эксплу… | ||||
| CVE-2024-20453US | — | — | ||
Уязвимость веб-интерфейса управления микропрограммного обеспечения IP-телефонов Cisco Small Business SPA300 и SPA500 связана с копированием в буфер без проверки размера входных дан… | ||||
| CVE-2024-20454US | critical9.8 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unaut… | ||||
| CVE-2024-20451US | high7.5 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unaut… | ||||
| CVE-2024-20450US | critical9.8 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unaut… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- CSCwk31988external
- Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilitiesself
- Cisco Security Vulnerability Policyexternal
- End-of-Sale and End-of-Life Announcement for the Cisco IP Phones SPA300 Series Selected Modelsexternal
- End-of-Sale and End-of-Life Announcement for the Cisco Small Business SPA303 Series IP Phoneexternal
- End-of-Sale and End-of-Life Announcement for All Remaining Cisco Small Business SPA500 Series IP Phonesexternal
- Cisco Security Advisories pageexternal
remediations (5)
- FixedCisco Small Business IP Phones
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business IP Phones
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business IP Phones
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business IP Phones
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business IP Phones
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan