Cisco Spa500_firmware
5 CVEs affecting Cisco Spa500_firmware. Latest disclosed: 2019-02-25. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-12271 | High | 8.8 | 2017-10-19 | A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device… |
CVE-2016-1469 | High | 7.5 | 2016-09-12 | The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (device outage) via a series of malformed H… |
CVE-2019-1683 | High | 7.4 | 2019-02-25 | A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker… |
CVE-2015-6403 | | 2015-12-15 | The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local user… | |
CVE-2015-0670 | | 2015-03-21 | The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attac… |