Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an attacker to execute arbitrary commands on the underlying operating system or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has not released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-20452US | — | — | ||
Уязвимость веб-интерфейса микропрограммного обеспечения IP-телефонов Cisco Small Business SPA300 и SPA500 связана с копированием в буфер без проверки размера входных данных. Эксплу… | ||||
| CVE-2024-20453US | — | — | ||
Уязвимость веб-интерфейса управления микропрограммного обеспечения IP-телефонов Cisco Small Business SPA300 и SPA500 связана с копированием в буфер без проверки размера входных дан… | ||||
| CVE-2024-20454US | critical9.8 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unaut… | ||||
| CVE-2024-20451US | high7.5 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unaut… | ||||
| CVE-2024-20450US | critical9.8 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unaut… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- CSCwk31988external
- Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilitiesself
- Cisco Security Vulnerability Policyexternal
- End-of-Sale and End-of-Life Announcement for the Cisco IP Phones SPA300 Series Selected Modelsexternal
- End-of-Sale and End-of-Life Announcement for the Cisco Small Business SPA303 Series IP Phoneexternal
- End-of-Sale and End-of-Life Announcement for All Remaining Cisco Small Business SPA500 Series IP Phonesexternal
- Cisco Security Advisories pageexternal
Behebungen (5)
- BehobenCisco Small Business IP Phones
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Small Business IP Phones
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Small Business IP Phones
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Small Business IP Phones
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Small Business IP Phones
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan