Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

small business ip phone vulnerabilities and exploits

(subscribe to this query)
6.9
CVSSv2
CVE-2014-3312
The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bu...
Cisco Spa941 4-line Ip Phone With 1-port EthernetCisco Spa922 1-line Ip Phone With 1-port EthernetCisco Spa 504g 4-line Ip PhoneCisco Spa 502g 1-line Ip PhoneCisco Spa901 1-line Ip PhoneCisco Spa 525g2 5-line Ip PhoneCisco Spa 501g 8-line Ip PhoneCisco Spa 303 3 Line Ip PhoneCisco Spa 525g 5-line Ip PhoneCisco Spa 514g 4-line Ip PhoneCisco Spa 301 1 Line Ip PhoneCisco Spa962 6-line Ip Phone With 2-port SwitchCisco Spa942 4-line Ip Phone With 2-port SwitchCisco Spa 512g 1-line Ip PhoneCisco Spa 509g 12-line Ip PhoneCisco Spa 508g 8-line Ip Phone
4.3
CVSSv2
CVE-2014-3313
Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.
Cisco Spa941 4-line Ip Phone With 1-port EthernetCisco Spa922 1-line Ip Phone With 1-port EthernetCisco Spa 508g 8-line Ip PhoneCisco Spa 504g 4-line Ip PhoneCisco Spa901 1-line Ip PhoneCisco Spa 525g2 5-line Ip PhoneCisco Spa 502g 1-line Ip PhoneCisco Spa 501g 8-line Ip PhoneCisco Spa 525g 5-line Ip PhoneCisco Spa 514g 4-line Ip PhoneCisco Spa 303 3 Line Ip PhoneCisco Spa 301 1 Line Ip PhoneCisco Spa962 6-line Ip Phone With 2-port SwitchCisco Spa942 4-line Ip Phone With 2-port SwitchCisco Spa 512g 1-line Ip PhoneCisco Spa 509g 12-line Ip Phone
7.8
CVSSv2
CVE-2016-1469
The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote malicious users to cause a denial of service (device outage) via a series of malformed HTTP requests, aka Bug ID CSCut67385.
Cisco Spa300 FirmwareCisco Spa500 Firmware
2.9
CVSSv2
CVE-2019-15126
An issue exists on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the a...
Apple IpadosApple Iphone OsApple Mac Os XBroadcom Bcm4389 Firmware -Broadcom Bcm43012 Firmware -Broadcom Bcm43013 Firmware -Broadcom Bcm4375 Firmware -Broadcom Bcm43752 Firmware -Broadcom Bcm4356 Firmware -
7.1
CVSSv2
CVE-2020-25687
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
7.1
CVSSv2
CVE-2020-25683
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocat...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
4.3
CVSSv2
CVE-2020-25684
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the ex...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0Arista Eos
4.3
CVSSv2
CVE-2020-25685
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is c...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
4.3
CVSSv2
CVE-2020-25686
A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
8.3
CVSSv2
CVE-2020-25681
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buff...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook