CVE-2023-22957

An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...

Input validation

A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to to modify a web page in the context of a user's browser. This vulnerability is due to insufficient validation of user-supplied input by the...

CVE-2023-20218

Cisco SPA500 Series ATAs web-based management interface is affected by CVE-2023-20218. Root cause: insufficient validation of user-supplied input in the web UI. Attack scenario: authenticated remote attacker can persuade a user to click a crafted link, enabling content modification in the browser...

CVE-2023-20218: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to to modify a web page in the context of a user's browser. This vulnerability is due to insufficient validation of user-supplied input by the...

Cisco Warns of Vulnerability in Popular Phone Adapter, Urges Migration to Newer Model

Cisco has warned of a critical security flaw in SPA112 2-Port Phone Adapters that it said could be exploited by a remote attacker to execute arbitrary code on affected devices. The issue, tracked as CVE-2023-20126, is rated 9.8 out of a maximum of 10 on the CVSS scoring system. The company credit...

Cisco Warns of Vulnerability in Popular Phone Adapter, Urges Migration to Newer Model

Cisco has warned of a critical security flaw in SPA112 2-Port Phone Adapters that it said could be exploited by a remote attacker to execute arbitrary code on affected devices. The issue, tracked as CVE-2023-20126, is rated 9.8 out of a maximum of 10 on the CVSS scoring system. The company credit...

PT-2023-2522 · Cisco · Cisco Ata 190 +1

Name of the Vulnerable Software and Affected Versions: Cisco SPA112 versions affected versions not specified Description: A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execute arbitrary code on an...

CVE-2022-47462

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47461

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47461

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47462

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

Design/Logic Flaw

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

Design/Logic Flaw

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47462

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47462

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47462

CVE-2022-47462 involves a missing permission check in the telephone service, enabling local escalation of privilege to system execution privileges. Public sources corroborate a vulnerability in the telephony stack (com.android.phone/system) with a Local attack vector and high impact on confidenti...

CVE-2022-47461

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47461

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47461

CVE-2022-47461 affects the telephony stack (com.android.phone) where a missing permission check in the telephone service can enable local elevation of privilege. The CVSS data indicate LOCAL attack vector, requiring HIGH privileges and potentially impacting confidentiality, integrity, and availab...

CVE-2022-47462: Missing Authorization

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...