PT-2019-1500 · Cisco · Cisco Small Business Spa5X5 Series Ip Phones +3

Name of the Vulnerable Software and Affected Versions: Cisco Small Business SPA112 Series IP Phones version 1.4.2 Cisco Small Business SPA525 Series IP Phones version 7.6.2 Cisco Small Business SPA5X5 Series IP Phones version 7.6.2 Cisco Small Business SPA500 Series IP Phones version 1.4.2...

Cisco SPA300 and SPA500 Series IP Phones Cross-Site Request Forgery Vulnerability

The Cisco SPA300 and SPA500 Series IP Phones are both IP phone products from Cisco USA. A cross-site request forgery vulnerability exists in the Cisco SPA300 and SPA500 Series IP Phones that stems from a lack of cross-site request forgery protection in the program. A remote attacker could exploit...

Cross site request forgery (csrf)

A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking...

CVE-2017-12271

A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking...

CVE-2017-12271

CVE-2017-12271 affects Cisco SPA300 and SPA500 Series IP Phones. The issue is a lack of cross-site request forgery (CSRF) protection in the web interface, allowing an unauthenticated, remote attacker to trigger unwanted actions by tricking a user into executing an adverse action. Documented impac...

CVE-2017-12271: Cross-Site Request Forgery (CSRF)

A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking...

PT-2017-12446 · Cisco · Cisco Spa500 Series Ip Phones +1

Name of the Vulnerable Software and Affected Versions: Cisco SPA300 and SPA500 Series IP Phones affected versions not specified Description: A lack of cross-site request forgery CSRF protection in the Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to...

Cisco SPA300 and SPA500 Series IP Phones Cross-Site Request Forgery Vulnerability

A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking...

CVE-2017-12219

A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is due to the...

CVE-2017-12219

The CVE-2017-12219 vulnerability affects Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones. It stems from the devices’ handling of IP fragments, specifically an inability to reassemble many large fragments in a short time. A remote, unauthenticated attacker can send a crafted strea...

CVE-2017-12219: Undefined Security Weakness

A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is due to the...

CVE-2016-1469

The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service device outage via a series of malformed HTTP requests, aka Bug ID CSCut67385...

CVE-2016-1469

CVE-2016-1469 affects Cisco Small Business SPA300, SPA500, and SPA51x IP Phones. The issue is in the HTTP framework which can be exploited by sending malformed HTTP requests to an affected device, allowing an unauthenticated remote attacker to cause a denial of service (device outage) (Bug ID CSC...

CVE-2016-1469

The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service device outage via a series of malformed HTTP requests, aka Bug ID CSCut67385...

CVE-2016-1469: Undefined Security Weakness

The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service device outage via a series of malformed HTTP requests, aka Bug ID CSCut67385...

Cisco Small Business SPA3x/5x Series Denial of Service Vulnerability

A vulnerability in the HTTP framework of Cisco Small Business SPA300 Series IP Phones, Cisco Small Business SPA500 Series IP Phones, and Cisco SPA51x IP Phones could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is du...

Cisco small business phone the firmware of the exposed high-risk vulnerabilities attackers can listen to private phone calls-vulnerability warning-the black bar safety net

The vulnerabilityCVE-2 0 1 5-0 6 7 0in the presence of is actually because some Cisco IP Phone default configuration contains a number of inappropriate settings. It allows an attacker to the affected device sends a special XML request to control the device. In addition, the vulnerability can be...

Cisco IP Phones Vulnerable To Remote Eavesdropping

A critical vulnerability in the firmware of Cisco small business phones lets an unauthenticated attacker to remotely eavesdrop on private conversation and make phone calls from vulnerable devices without needing to authenticate, Cisco warned. LISTEN AND MAKE PHONE CALLS REMOTELY The vulnerability...

Cisco Small Business SPA300 and SPA500 Series IP Phones Unauthenticated Remote Dial Vulnerability

A vulnerability in the firmware of the Cisco Small Business SPA 300 and 500 series IP phones could allow an unauthenticated, remote attacker to listen to the audio stream of an IP phone. The vulnerability is due to improper authentication settings in the default configuration. An attacker could...

Cisco Small Business SPA300 and SPA500 Series IP Phones Cross-Site Scripting Vulnerability

A vulnerability in the web user interface of the Cisco Small Business SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could...