Cisco SPA112 Firmware vulnerabilities

20 CVEs affecting Cisco SPA112 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20126, published 2023-05-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-20126, published 2023-05-04. Critical severity, CVSS 9.8. EPSS: 36.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This…
CVE-2019-12704, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to view the contents of arbitrary files on…
CVE-2019-15258, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to cause a denial of service condition on…
CVE-2019-15257, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to access sensitive information on an…
CVE-2019-12708, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to access sensitive information on an…
CVE-2019-1683, published 2019-02-25. High severity, CVSS 7.4. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker to listen to or control some aspects of…
CVE-2019-12702, published 2019-10-16. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to conduct cross-site scripting attacks.…
CVE-2019-15252, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…
CVE-2019-15251, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…
CVE-2019-15250, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…

Latest

CVE-2019-15249, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…
CVE-2019-15248, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…
CVE-2019-15247, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…
CVE-2019-15246, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…