6.5
CVSSv3

CVE-2019-15258

Published: 16/10/2019 Updated: 09/10/2020
CVSS v2 Base Score: 6.8 | Impact Score: 6.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C

Vulnerability Summary

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote malicious user to cause a denial of service condition on an affected device. The vulnerability is due to improper validation of user-supplied requests to the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the malicious user to cause the device to stop responding, requiring manual intervention for recovery.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco spa112_firmware

cisco spa112_firmware 1.4.1

cisco spa122_firmware

cisco spa122_firmware 1.4.1

Vendor Advisories

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to cause a denial of service condition on an affected device The vulnerability is due to improper validation of user-supplied requests to the web-based management interface An attacker could e ...