CVE-2011-2545

🗓️ 13 Jun 2012 20:00:00Reported by ciscoType

cve

cve🔗 web.nvd.nist.gov👁 61 Views

CVE-2011-2545 XSS vulnerability in Cisco SPA8000, SPA8800, SPA2102, SPA3102, and SPA 500 series IP phones before 6.1.11, 5.2.13, 7.4.9 allows remote attackers to inject arbitrary web script or HTML via the FROM field of an INVITE message

Reporter	Title	Published	Views	Family All 8
Cisco	Cisco Small Business Devices Cross-Site Scripting Vulnerability	12 Jun 201220:59	–	cisco
Cvelist	CVE-2011-2545	13 Jun 201220:00	–	cvelist
EUVD	EUVD-2011-2528	7 Oct 202500:30	–	euvd
NVD	CVE-2011-2545	13 Jun 201220:55	–	nvd
Prion	Cross site scripting	13 Jun 201220:55	–	prion
Positive Technologies	PT-2011-07: Cross-Site Scripting in Cisco Small Business Devices	23 Jun 201100:00	–	ptsecurity
RedhatCVE	CVE-2011-2545	22 May 202503:26	–	redhatcve
Tenable Nessus	Cisco IP Phones Improper Neutralization of Input During Web Page Generation (CVE-2011-2545)	11 Apr 202500:00	–	nessus

NVD

Node

cisco spa8000_8-port_ip_telephony_gateway_firmwareRange≤6.1.10

OR

cisco spa8000_8-port_ip_telephony_gateway_firmwareMatch5.1.12

OR

cisco spa8000_8-port_ip_telephony_gateway_firmwareMatch6.1.3

AND

cisco spa8000_8-port_ip_telephony_gatewayMatch-

Node

cisco spa8800_8-port_ip_telephony_gateway_firmwareRange≤6.1.7

AND

cisco spa8800_ip_telephony_gatewayMatch-

Node

cisco spa2102_phone_adapter_with_router_firmwareRange≤5.2.12

OR

cisco spa2102_phone_adapter_with_router_firmwareMatch5.2.3

OR

cisco spa2102_phone_adapter_with_router_firmwareMatch5.2.5

OR

cisco spa2102_phone_adapter_with_router_firmwareMatch5.2.10

AND

cisco spa2102_phone_adapter_with_routerMatch-

Node

cisco spa3102_voice_gateway_with_router_firmwareRange≤5.1.10

OR

cisco spa3102_voice_gateway_with_router_firmwareMatch3.3.6

OR

cisco spa3102_voice_gateway_with_router_firmwareMatch5.1.7

AND

cisco spa3102_voice_gateway_with_routerMatch-

Node

cisco spa_500_series_ip_phone_firmwareRange≤7.4.8

OR

cisco spa_500_series_ip_phone_firmwareMatch7.3.7

OR

cisco spa_500_series_ip_phone_firmwareMatch7.4.3

OR

cisco spa_500_series_ip_phone_firmwareMatch7.4.4

OR

cisco spa_500_series_ip_phone_firmwareMatch7.4.6

OR

cisco spa_500_series_ip_phone_firmwareMatch7.4.7

AND

cisco spa_501g_8-line_ip_phone

OR

cisco spa_502g_1-line_ip_phone

OR

cisco spa_504g_4-line_ip_phone

OR

cisco spa_508g_8-line_ip_phone

OR

cisco spa_509g_12-line_ip_phone

OR

cisco spa_512g_1-line_ip_phone

OR

cisco spa_514g_4-line_ip_phone

OR

cisco spa_525g_5-line_ip_phone

OR

cisco spa_525g2_5-line_ip_phone

Source	Link
tools	www.tools.cisco.com/security/center/viewAlert.x

29 Apr 2026 01:13Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

EPSS0.00296

cve-2011-2545 xss cisco sip spa8000 spa8800 spa2102 spa3102 spa 500 ip phones vulnerability remote attackers web script html invite message