Skip to main content

Spa525G2 Firmware

3 CVEs product

Monthly

CVE-2023-20218 Aug 03, 22:15 MEDIUM This Month

A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to to modify a web page in the context of a. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Cisco Spa525 Firmware Spa500S Firmware Spa500Ds Firmware +9
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-20181 Aug 03, 22:15 MEDIUM This Month

A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct XSS attacks. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Cisco Spa525 Firmware Spa500S Firmware Spa500Ds Firmware +9
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2019-1923 Jul 17, 21:15 MEDIUM This Month

A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Cisco Spa500S Firmware Spa500Ds Firmware Spa501G Firmware +7
NVD
CVSS 3.1
6.6
EPSS
0.5%
EPSS 0% CVSS 6.1
MEDIUM This Month

A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to to modify a web page in the context of a. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Cisco Spa525 Firmware +11
NVD
EPSS 0% CVSS 6.1
MEDIUM This Month

A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct XSS attacks. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Cisco Spa525 Firmware +11
NVD
EPSS 0% CVSS 6.6
MEDIUM This Month

A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Cisco Spa500S Firmware +9
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy