Critical WID-SEC-2024-1796 3 CVEs

Cisco IP Phone: Mehrere Schwachstellen

Published Aug 7, 2024 · Updated Aug 7, 2024 · de-DE

Vendor: Cisco Product: IP Phone Product: Small Business

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Cisco IP Phone ausnutzen, um beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu erzeugen.

Product

Cisco IP Phone ist ein Endgerät für IP-basierte Telefonie.

Vulnerabilities 3

Critical 9.8

CVE-2024-20450

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisc…

Cisco Cisco Small Business IP Phones Network devices

Aug 7, 2024
Critical 9.8

CVE-2024-20454

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisc…

Cisco Cisco Small Business IP Phones Network devices

Aug 7, 2024
High 7.5

CVE-2024-20451

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisc…

Cisco Cisco Small Business IP Phones Network devices

Aug 7, 2024

Revision history

2024-08-07 #1
Initiale Fassung

References

Cisco Security Advisories vom 2024-08-07
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-http-vulns-RJZmX2Xz