Cisco SPA122 Firmware vulnerabilities

19 CVEs affecting Cisco SPA122 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-15258, published 2019-10-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-12704, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to view the contents of arbitrary files on…
CVE-2019-15258, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to cause a denial of service condition on…
CVE-2019-15257, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to access sensitive information on an…
CVE-2019-12708, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to access sensitive information on an…
CVE-2019-12702, published 2019-10-16. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to conduct cross-site scripting attacks.…
CVE-2019-15252, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…
CVE-2019-15251, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…
CVE-2019-15250, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…
CVE-2019-15249, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…
CVE-2019-15248, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…

Latest

CVE-2019-15247, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…
CVE-2019-15246, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…
CVE-2019-15245, published 2019-10-16. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The…