CVE-2017-15805

Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files...

CVE-2017-15805

Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files...

CVE-2017-15805

Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files...

PT-2017-14236

Name of the Vulnerable Software and Affected Versions Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 Description The issue allows for directory traversal in "scgi-bin/platform.cgi" via the thispage parameter, enabling the reading of arbitrary files. Recommendations...

Cisco Small Business SA520 and SA540 Device Path Traversal Vulnerability

The Cisco Small Business SA520 and SA540 are both firewall appliances from Cisco. A path traversal vulnerability exists in the Cisco Small Business SA520 and SA540 devices using firmware versions 2.1.71 and 2.2.0.7. The vulnerability can be exploited to read arbitrary files with the 'thispage'...

CVE-2017-15805: Improper Limitation of a Pathname to a Restricted Directory

Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files...

smallbusinessadvocate.com XSS vulnerability

Vulnerable URL: https://www.smallbusinessadvocate.com/widget/contents/article.php?id=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Race condition

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS...

CVE-2017-12259

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS condition. The...

CVE-2017-12259

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS condition. The...

CVE-2017-12260

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS...

CVE-2017-12259

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS condition. The...

CVE-2017-12259

The CVE-2017-12259 issue affects Cisco Small Business SPA51x Series IP Phones (firmware

CVE-2017-12260

CVE-2017-12260 describes a DoS vulnerability in Cisco Small Business SPA50x/SPA51x/SPA52x IP Phones caused by improper handling of SIP requests. An unauthenticated remote attacker can send a SIP payload containing formatted specifiers, causing the device to become unresponsive until manual restar...

PT-2017-12436

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones versions 7.6.2SR1 and earlier Description A vulnerability in the implementation of Session Initiation Protocol SIP functionality could allow an unauthenticated, remote attacker t...

PT-2017-12434

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA51x Series IP Phones versions 7.6.2SR1 and earlier Description A vulnerability in the implementation of Session Initiation Protocol SIP functionality could allow an unauthenticated, remote attacker to cause an affected...

CVE-2017-12260: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS...

CVE-2017-12259: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS condition. The...

Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones SIP Denial of Service Vulnerability

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...