Aller au contenu
en Se connecter
9.8 Critique

CVE-2024-20454 Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco…

Description

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges. These vulnerabilities exist because incoming HTTP packets are not properly checked for errors, which could result in a buffer overflow. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to overflow an internal buffer and execute arbitrary commands at the root privilege level.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Small Business IP Phones 7.6 7.6.0 → 7.6.2 Pas de correctif indiqué
Cisco Small Business IP Phones 7.5 7.5.1 → 7.5.7 Pas de correctif indiqué
Cisco Small Business IP Phones 7.4 7.4.3 → 7.4.9 Pas de correctif indiqué
Cisco Small Business IP Phones 7.3.7 Pas de correctif indiqué
Cisco Small Business IP Phones 1.0.17 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Small Business IP Phones

Les 7 CVE de Cisco Small Business IP Phones →
CVE-2021-1379 Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations… 6.5 Moyenne CVE-2024-20451 Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco… 7.5 Élevée CVE-2024-20450 Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco… 9.8 Critique CVE-2023-20181 A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an… 6.1 Moyenne
Suivre cette CVE