Skip to content
OpenAdvisories
Critical WID-SEC-2023-1138 1 CVE

Cisco SPA112 2-Port Phone Adapter: Schwachstelle ermöglicht Codeausführung

Published May 3, 2023 · Updated May 3, 2023 · de-DE

Vendor: Cisco Product: Analog Telephone Adaptor (ATA) SPA112 2-Port

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco SPA112 2-Port Phone Adapter ausnutzen, um beliebigen Programmcode auszuführen.

Product

Der Cisco Analog Telephone Adapter ist ein Handset-to-Ethernet-Adapter, der herkömmliche Telefongeräte in IP-Geräte verwandelt.

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-20126 Public exploit EPSS 37%

    Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to a missing authentication process within t…

    Cisco Cisco Small Business IP Phones Network devices

Revision history

  1. #1

    Initiale Fassung

References