cisco-sa-spa-http-vulns-RJZmX2Xz: Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities
First published: Wed Aug 07 2024(Updated: )
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an attacker to execute arbitrary commands on the underlying operating system or cause a denial of service (DoS)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SPA300 Series IP Phone | ||
| Cisco SPA500 Series IP Phones firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of cisco-sa-spa-http-vulns-RJZmX2Xz?
The severity of cisco-sa-spa-http-vulns-RJZmX2Xz is high due to the potential for arbitrary command execution and denial of service.
How do I fix cisco-sa-spa-http-vulns-RJZmX2Xz?
To fix cisco-sa-spa-http-vulns-RJZmX2Xz, update your Cisco Small Business SPA300 or SPA500 Series IP Phones to the latest firmware version.
What products are affected by cisco-sa-spa-http-vulns-RJZmX2Xz?
The affected products in cisco-sa-spa-http-vulns-RJZmX2Xz include the Cisco Small Business SPA300 Series and SPA500 Series IP Phones.
What type of vulnerabilities are described in cisco-sa-spa-http-vulns-RJZmX2Xz?
cisco-sa-spa-http-vulns-RJZmX2Xz describes vulnerabilities that allow arbitrary command execution and denial of service in the web-based management interface.
Can cisco-sa-spa-http-vulns-RJZmX2Xz lead to unauthorized access?
Yes, cisco-sa-spa-http-vulns-RJZmX2Xz can potentially lead to unauthorized access due to the ability to execute arbitrary commands.
- collector/cisco-recent
- source/Cisco
- agent/last-modified-date
- agent/title
- agent/references
- agent/severity
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco spa300 series ip phone
- canonical/cisco spa500 series ip phones firmware