CVE-2024-20454

CVE-2024-20454 affects Cisco Small Business SPA300 Series and SPA500 Series IP Phones. The web UI has multiple vulnerabilities allowing unauthenticated, remote execution of arbitrary commands with root privileges via crafted HTTP requests. The underlying cause is improper checking of incoming HTT...

CVE-2024-20454

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

EUVD-2024-18169

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

CVE-2024-20454

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

EUVD-2024-18165

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

CVE-2024-20450

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

CVE-2024-20450

CVE-2024-20450 affects Cisco Small Business SPA300/SPA500 IP Phones’ web UI. The issue stems from improper validation of incoming HTTP packets, enabling a buffer overflow that could let an unauthenticated, remote attacker run arbitrary commands with root privileges. Exploitation occurs by sending...

CVE-2024-20450

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

Cisco Small Business SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an attacker to execute arbitrary commands on the underlying operating system or cause a denial of service DoS condition. For...

Cisco Small Business SPA300 Series IP Phones和Cisco Small Business SPA500 Series IP Phones 安全漏洞

Cisco Small Business SPA500 Series IP Phones and Cisco Small Business SPA300 Series IP Phones are both products of Cisco, Inc.Cisco Small Business SPA500 Series IP Phones are an SPA500 Series IP Phone. The Cisco Small Business SPA500 Series IP Phones are SPA500 Series IP Phones.The Cisco Small...

File upload vulnerability exists in jpress of Guizhou Small Code Technology Co.(CNVD-2024-38103)

JPress is a complete Java CMS web management system. A file upload vulnerability exists in Guizhou Small Code Technology Co. jpress, which can be exploited by an attacker to gain control of the server...

CVE-2024-20451: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly. These vulnerabilities exist because...

PT-2024-5607

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA300 Series IP Phones affected versions not specified Cisco Small Business SPA500 Series IP Phones affected versions not specified Description The issue is related to the web-based management interface of the affected...

PT-2024-5606

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA300 and SPA500 affected versions not specified Description The issue is related to a buffer overflow vulnerability in the web management interface of the software, which can be exploited by sending specially crafted HTT...

CVE-2024-20450: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

PT-2024-5449

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA300 Series IP Phones affected versions not specified Cisco Small Business SPA500 Series IP Phones affected versions not specified Description The issue is related to a buffer overflow vulnerability in the web-based...

PT-2024-5605

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA300 Series IP Phones affected versions not specified Cisco Small Business SPA500 Series IP Phones affected versions not specified Description The issue is related to a buffer overflow vulnerability in the web-based...

CVE-2024-20454: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

Rapid7’s Ransomware Radar Report Shows Threat Actors are Evolving …Fast.

Few issues keep cybersecurity professionals up at night more than the threat of ransomware. The ubiquity of targets, the relative organization of threat actors, and their multiple paths of entry make combating ransomware particularly formidable. But there is one more facet to this threat that mak...

Webinar: Discover the All-in-One Cybersecurity Solution for SMBs

In today's digital battlefield, small and medium businesses SMBs face the same cyber threats as large corporations, but with fewer resources. Managed service providers MSPs are struggling to keep up with the demand for protection. If your current cybersecurity strategy feels like a house of cards...