Aller au contenu
en Se connecter
6.1 Moyenne

CVE-2023-20181 A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an…

Description

A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct XSS attacks. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Small Business IP Phones 7.6 7.6.0 → 7.6.2 Pas de correctif indiqué
Cisco Small Business IP Phones 7.5 7.5.1 → 7.5.7 Pas de correctif indiqué
Cisco Small Business IP Phones 7.4 7.4.3 → 7.4.9 Pas de correctif indiqué
Cisco Small Business IP Phones 7.3.7 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Small Business IP Phones

Les 7 CVE de Cisco Small Business IP Phones →
CVE-2021-1379 Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations… 6.5 Moyenne CVE-2024-20451 Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco… 7.5 Élevée CVE-2024-20454 Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco… 9.8 Critique CVE-2024-20450 Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco… 9.8 Critique
Suivre cette CVE