Priority HIGH 75
A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.36679 · Published 2023-05-04 · No fix listed CWE-306
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 38
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00578 · Published 2019-10-16 · No fix listed CWE-119
Priority LOW 34
A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker to listen to or control some aspects of a Transport Level Sec…
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00874 · Published 2019-02-25 · No fix listed CWE-295
Priority LOW 32
A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to cause a denial of service condition on an affected device.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01399 · Published 2019-10-16 · No fix listed CWE-399
Priority LOW 32
A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to view the contents of arbitrary files on an affected device.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01565 · Published 2019-10-16 · No fix listed CWE-200
Priority LOW 31
A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to access sensitive information on an affected device.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01088 · Published 2019-10-16 · No fix listed CWE-200
Priority LOW 31
A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to access sensitive information on an affected device.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01088 · Published 2019-10-16 · No fix listed CWE-200
Priority LOW 25
A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to conduct cross-site scripting attacks.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00633 · Published 2019-10-16 · No fix listed CWE-79