CVE-2017-12271
Published Oct 19, 2017A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is…
Vendor/product archive
cisco / spa300_firmware CVEs
Beta · best-effort4 CVEs tagged to cisco / spa300_firmware — 0 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2016-1469
Published Sep 12, 2016The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (device outage) via a series of malformed HTTP requests, aka Bu…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-6403
Published Dec 15, 2015The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan h…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-0670
Published Mar 21, 2015The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-s…
- evidence mentions
- 3
- Buzz score
- 21.9
Showing 1-4 of 4 CVEsPage 1 of 1