Vulnerabilities fixed in Cisco Small Business IP Phones

🗓️ 08 Aug 2024 08:01:30Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 2 Views

Cisco fixed vulnerabilities in Small Business IP Phone firmware; web-management could allow arbitrary code.

Reporter	Title	Published	Views	Family All 27
BDU FSTEC	The vulnerability of the web interface of the microprogramming software for Cisco Small Business SPA300 and SPA500 allows a perpetrator to execute arbitrary commands in the basic operating system.	8 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web interface of the microprogramming software for Cisco Small Business SPA300 and SPA500 allows a perpetrator to execute arbitrary commands in the basic operating system.	19 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface for managing microprogrammed IP phones from Cisco Small Business SPA300 and SPA500 allows a hacker to trigger a service failure.	19 Aug 202400:00	–	bdu_fstec
Circl	CVE-2024-20450	7 Aug 202420:19	–	circl
Circl	CVE-2024-20451	7 Aug 202420:19	–	circl
Circl	CVE-2024-20454	7 Aug 202420:19	–	circl
Cisco	Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities	7 Aug 202416:00	–	cisco
CNNVD	Cisco Small Business SPA300 Series IP Phones和Cisco Small Business SPA500 Series IP Phones 安全漏洞	7 Aug 202400:00	–	cnnvd
CVE	CVE-2024-20450	7 Aug 202416:46	–	cve
CVE	CVE-2024-20451	7 Aug 202416:48	–	cve

Vulners

Node

cisco spa300_firmwareMatch1.0.17

OR

cisco spa300_firmwareMatch7.3.7

OR

cisco spa300_firmwareMatch7.4.3

OR

cisco spa300_firmwareMatch7.4.4

OR

cisco spa300_firmwareMatch7.4.6

OR

cisco spa300_firmwareMatch7.4.7

OR

cisco spa300_firmwareMatch7.4.8

OR

cisco spa300_firmwareMatch7.4.9

OR

cisco spa300_firmwareMatch7.5.1

OR

cisco spa300_firmwareMatch7.5.2

OR

cisco spa300_firmwareMatch7.5.2a

OR

cisco spa300_firmwareMatch7.5.2b

OR

cisco spa300_firmwareMatch7.5.3

OR

cisco spa300_firmwareMatch7.5.4

OR

cisco spa300_firmwareMatch7.5.5

OR

cisco spa300_firmwareMatch7.5.5a

OR

cisco spa300_firmwareMatch7.5.5b

OR

cisco spa300_firmwareMatch7.5.6_xu

OR

cisco spa300_firmwareMatch7.5.6

OR

cisco spa300_firmwareMatch7.5.6a

OR

cisco spa300_firmwareMatch7.5.6c

OR

cisco spa300_firmwareMatch7.5.7

OR

cisco spa300_firmwareMatch7.5.7s

OR

cisco spa300_firmwareMatch7.6.0

OR

cisco spa300_firmwareMatch7.6.1

OR

cisco spa300_firmwareMatch7.6.2

OR

cisco spa300_firmwareMatch7.6.2sr1

OR

cisco spa300_firmwareMatch7.6.2sr2

OR

cisco spa300_firmwareMatch7.6.2sr3

OR

cisco spa300_firmwareMatch7.6.2sr4

OR

cisco spa300_firmwareMatch7.6.2sr5

OR

cisco spa300_firmwareMatch7.6.2sr6

OR

cisco spa300_firmwareMatch7.6.2sr7

OR

cisco spa500Match1.0.17

OR

cisco spa500Match7.3.7

OR

cisco spa500Match7.4.3

OR

cisco spa500Match7.4.4

OR

cisco spa500Match7.4.6

OR

cisco spa500Match7.4.7

OR

cisco spa500Match7.4.8

OR

cisco spa500Match7.4.9

OR

cisco spa500Match7.5.1

OR

cisco spa500Match7.5.2

OR

cisco spa500Match7.5.2a

OR

cisco spa500Match7.5.2b

OR

cisco spa500Match7.5.3

OR

cisco spa500Match7.5.4

OR

cisco spa500Match7.5.5

OR

cisco spa500Match7.5.5a

OR

cisco spa500Match7.5.5b

OR

cisco spa500Match7.5.6_xu

OR

cisco spa500Match7.5.6

OR

cisco spa500Match7.5.6a

OR

cisco spa500Match7.5.6c

OR

cisco spa500Match7.5.7

OR

cisco spa500Match7.5.7s

OR

cisco spa500Match7.6.0

OR

cisco spa500Match7.6.1

OR

cisco spa500Match7.6.2

OR

cisco spa500Match7.6.2sr1

OR

cisco spa500Match7.6.2sr2

OR

cisco spa500Match7.6.2sr3

OR

cisco spa500Match7.6.2sr4

OR

cisco spa500Match7.6.2sr5

OR

cisco spa500Match7.6.2sr6

OR

cisco spa500Match7.6.2sr7

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-http-vulns-RJZmX2Xz

08 Aug 2024 08:01Current

7.9High risk

Vulners AI Score7.9

CVSS 3.19.8

EPSS0.22933

SSVC

Small Business IP Phones Firmware Web Management Arbitrary Code Unauthenticated Access