CVE-2023-20218

🗓️ 03 Aug 2023 21:20:29Reported by ciscoType

A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) allows authenticated remote attackers to modify web pages

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-20218	26 Jan 202415:13	–	circl
Cisco	Cisco Small Business SPA500 Series IP Phones Web UI Vulnerabilities	19 Jul 202316:00	–	cisco
CNNVD	Cisco Small Business SPA500 Series IP Phones 跨站脚本漏洞	20 Jul 202300:00	–	cnnvd
CNVD	Cisco Small Business SPA500 Series IP Phones HTML Injection Vulnerability	24 Jul 202300:00	–	cnvd
Cvelist	CVE-2023-20218	3 Aug 202321:20	–	cvelist
EUVD	EUVD-2023-24397	3 Oct 202520:07	–	euvd
NVD	CVE-2023-20218	3 Aug 202322:15	–	nvd
Prion	Input validation	3 Aug 202322:15	–	prion
Positive Technologies	PT-2023-17417 · Cisco · Cisco Spa500 Series	19 Jul 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-20218	23 May 202501:45	–	redhatcve

NVD

Node

cisco spa500ds_firmwareMatch-

AND

cisco spa500dsMatch-

Node

cisco spa500s_firmwareMatch-

AND

cisco spa500sMatch-

Node

cisco spa501g_firmwareMatch-

AND

cisco spa501gMatch-

Node

cisco spa502g_firmwareMatch-

AND

cisco spa502gMatch-

Node

cisco spa504g_firmwareMatch-

AND

cisco spa504gMatch-

Node

cisco spa508g_firmwareMatch-

AND

cisco spa508gMatch-

Node

cisco spa509g_firmwareMatch-

AND

cisco spa509gMatch-

Node

cisco spa512g_firmwareMatch-

AND

cisco spa512gMatch-

Node

cisco spa514g_firmwareMatch-

AND

cisco spa514gMatch-

Node

cisco spa525_firmwareMatch-

AND

cisco spa525Match-

Node

cisco spa525g_firmwareMatch-

AND

cisco spa525gMatch-

Node

cisco spa525g2_firmwareMatch-

AND

cisco spa525g2Match-

[
  {
    "vendor": "Cisco",
    "product": "Cisco Small Business IP Phones",
    "versions": [
      {
        "version": "7.6.0",
        "status": "affected"
      },
      {
        "version": "7.6.2",
        "status": "affected"
      },
      {
        "version": "7.6.2SR3",
        "status": "affected"
      },
      {
        "version": "7.6.2SR6",
        "status": "affected"
      },
      {
        "version": "7.6.2SR2",
        "status": "affected"
      },
      {
        "version": "7.6.2SR4",
        "status": "affected"
      },
      {
        "version": "7.6.2SR1",
        "status": "affected"
      },
      {
        "version": "7.6.2SR5",
        "status": "affected"
      },
      {
        "version": "7.6.2SR7",
        "status": "affected"
      },
      {
        "version": "7.6.1",
        "status": "affected"
      },
      {
        "version": "7.3.7",
        "status": "affected"
      },
      {
        "version": "7.5.5",
        "status": "affected"
      },
      {
        "version": "7.5.6(XU)",
        "status": "affected"
      },
      {
        "version": "7.5.2",
        "status": "affected"
      },
      {
        "version": "7.5.2a",
        "status": "affected"
      },
      {
        "version": "7.5.7",
        "status": "affected"
      },
      {
        "version": "7.5.3",
        "status": "affected"
      },
      {
        "version": "7.5.6",
        "status": "affected"
      },
      {
        "version": "7.5.2b",
        "status": "affected"
      },
      {
        "version": "7.5.6c",
        "status": "affected"
      },
      {
        "version": "7.5.6a",
        "status": "affected"
      },
      {
        "version": "7.5.7s",
        "status": "affected"
      },
      {
        "version": "7.5.1",
        "status": "affected"
      },
      {
        "version": "7.5.5a",
        "status": "affected"
      },
      {
        "version": "7.5.5b",
        "status": "affected"
      },
      {
        "version": "7.5.4",
        "status": "affected"
      },
      {
        "version": "7.4.7",
        "status": "affected"
      },
      {
        "version": "7.4.4",
        "status": "affected"
      },
      {
        "version": "7.4.8",
        "status": "affected"
      },
      {
        "version": "7.4.3",
        "status": "affected"
      },
      {
        "version": "7.4.9",
        "status": "affected"
      },
      {
        "version": "7.4.6",
        "status": "affected"
      }
    ]
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-web-multi-7kvPmu2F

21 Nov 2024 07:40Current

6Medium risk

Vulners AI Score6

CVSS 3.15.8 - 6.1

EPSS0.00129

SSVC