Cisco SPA ATA SIP Detection

Binary data ciscospasipdetection.nbin...

CVE-2019-15258

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper validation of user-supplied requests to the...

CVE-2019-15258

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper validation of user-supplied requests to the...

CVE-2019-12703

A vulnerability in the web-based management interface of Cisco SPA122 ATA with Router Devices could allow an unauthenticated, adjacent attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface...

CVE-2019-12708

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to unsafe handling of user credentials. An attacker could explo...

Input validation

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper restrictions on configuration information. An...

Cross site scripting

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input by the web-based management...

CVE-2019-15257

CVE-2019-15257 affects Cisco SPA100 Series ATAs. The vulnerability arises in the web-based management interface where improper restrictions on configuration information allow an authenticated remote attacker to retrieve running configuration data, potentially exposing sensitive information. Impac...

CVE-2019-15250

The provided documents describe CVE-2019-15250 in Cisco SPA100 Series Analog Telephone Adapters (ATAs). Affected component: web-based management interface of Cisco SPA100 Series ATAs. Root cause: improper validation of user-supplied input to the web management interface, enabling an authenticated...

CVE-2019-15248

Cisco SPA100 Series ATAs are affected by multiple remote-code-execution vulnerabilities due to improper validation of input in the web-based management interface. Authentication to the management interface and crafted requests can lead to arbitrary code execution with elevated privileges, with th...

CVE-2019-15247

Cisco SPA100 Series ATAs are affected by CVE-2019-15247 due to improper validation of input to the device’s web-based management interface. An authenticated, adjacent attacker could craft requests to the affected device and execute arbitrary code with elevated privileges, with the management inte...

CVE-2019-15246 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15245

Cisco SPA100 Series ATAs are affected by CVE-2019-15245, with multiple reviewed advisories confirming remote code execution via improper validation of input to the web-based management interface. An authenticated, adjacent attacker who can access the device’s web UI can craft requests to execute ...

CVE-2019-15244

Cisco SPA100 Series ATAs are affected by multiple remote code execution vulnerabilities due to improper validation of input to the web-based management interface. An authenticated, adjacent attacker could exploit crafted requests to execute arbitrary code with elevated privileges. The web UI is e...

CVE-2019-15243 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15243

CVE-2019-15243 affects Cisco SPA100 Series ATAs. The issue stems from improper validation of input to the web-based management interface , allowing an authenticated, adjacent attacker to send crafted requests and execute arbitrary code with elevated privileges . The vulnerabilities enable remote ...

CVE-2019-15241

Cisco SPA100 Series Analog Telephone Adapters are affected by multiple CVEs, including CVE-2019-15241. The root cause is improper validation of user-supplied input in the devices’ web-based management interface, enabling an authenticated adjacent attacker to execute arbitrary code with elevated p...

CVE-2019-15242

The CVE-2019-15242 entry concerns Cisco SPA100 Series Analog Telephone Adapters. The connected sources describe multiple vulnerabilities arising from improper validation of user-supplied input to the devices’ web-based management interface, allowing an authenticated, adjacent attacker to execute ...

CVE-2019-15240

Cisco SPA100 Series Analog Telephone Adapters are affected by multiple remote code execution vulnerabilities (CVE-2019-15240) due to improper validation of input to the web management interface. An authenticated, adjacent attacker can send crafted requests after logging into the web interface, po...

CVE-2019-12708

Cisco SPA100 Series Analog Telephone Adapters expose an information-disclosure vulnerability in the web-based management interface due to unsafe handling of credentials. An authenticated, remote attacker could view portions of the interface to access administrative credentials and potentially reu...