4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users

UPDATE Multiple high-severity vulnerabilities in the Grandstream HT800 series of Analog Telephone Adaptors ATAs threaten home office and midrange users alike, with outages, eavesdropping and device takeover. The HT800 series of ATAs is designed for everyone from home or small-office users to...

Cisco ATA Detection Consolidation

Consolidation of Cisco Analog Telephone Adapter ATA detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SUSE SLES12 Security Update : systemd (SUSE-SU-2020:1842-1)

This update for systemd fixes the following issues : CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command bsc1161436. Renamed the persistent link for ATA devices bsc1164538 shared/install: try harder to find enablement symlinks when disabling a unit bsc1157315 tmpfiles:...

SUSE-SU-2020:1842-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command bsc1161436. - Renamed the persistent link for ATA devices bsc1164538 - shared/install: try harder to find enablement symlinks when disabling a unit bsc1157315 -...

SUSE-SU-2020:1828-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command bsc1161436. - Renamed the persistent link for ATA devices bsc1164538 - shared/install: try harder to find enablement symlinks when disabling a unit bsc1157315 -...

CVE-2018-10021

The code in the drivers/scsi/libsas/sasscsihost.c file in the Linux kernel allow a physically proximate attacker to cause a memory leak in the ATA command queue and, thus, denial of service by triggering certain failure conditions...

Critical Firefox 0-Day Under Active Attacks – Update Your Browser Now!

Attention! Are you using Firefox as your web browsing software on your Windows, Linux, or Mac systems? If yes, you should immediately update your free and open-source Firefox web browser to the latest version available on Mozilla's website. Why the urgency? Mozilla earlier today released Firefox...

DetectionLab - Vagrant And Packer Scripts To Build A Lab Environment Complete With Security Tooling And Logging Best Practices

DetectionLab is tested weekly on Saturdays via a scheduled CircleCI workflow to ensure that builds are passing. Purpose This lab has been designed with defenders in mind. Its primary purpose is to allow the user to quickly build a Windows domain that comes pre-loaded with security tooling and som...

Cisco SPA ATA SIP Detection

Binary data ciscospasipdetection.nbin...

Cisco SPA ATA Web Interface Detection

Binary data ciscospawebdetection.nbin...

CVE-2019-15258

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper validation of user-supplied requests to the...

CVE-2019-15258

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper validation of user-supplied requests to the...

CVE-2019-12708

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to unsafe handling of user credentials. An attacker could explo...

CVE-2019-12703

A vulnerability in the web-based management interface of Cisco SPA122 ATA with Router Devices could allow an unauthenticated, adjacent attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface...

Cross site scripting

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input by the web-based management...

Input validation

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper restrictions on configuration information. An...

CVE-2019-15257

CVE-2019-15257 affects Cisco SPA100 Series ATAs. The vulnerability arises in the web-based management interface where improper restrictions on configuration information allow an authenticated remote attacker to retrieve running configuration data, potentially exposing sensitive information. Impac...

CVE-2019-15250

The provided documents describe CVE-2019-15250 in Cisco SPA100 Series Analog Telephone Adapters (ATAs). Affected component: web-based management interface of Cisco SPA100 Series ATAs. Root cause: improper validation of user-supplied input to the web management interface, enabling an authenticated...

CVE-2019-15248

Cisco SPA100 Series ATAs are affected by multiple remote-code-execution vulnerabilities due to improper validation of input in the web-based management interface. Authentication to the management interface and crafted requests can lead to arbitrary code execution with elevated privileges, with th...

CVE-2019-15247

Cisco SPA100 Series ATAs are affected by CVE-2019-15247 due to improper validation of input to the device’s web-based management interface. An authenticated, adjacent attacker could craft requests to the affected device and execute arbitrary code with elevated privileges, with the management inte...