Known vulnerabilities in Cisco Small Business SPA500 Series IP Phones

Vendor: Cisco Systems, Inc
Software: Cisco Small Business SPA500 Series IP Phones
Software CPE: cpe:2.3:h:cisco_systems:cisco_small_business_spa500_series_ip_phones:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Small Business SPA500 Series IP Phones Cisco Small Business SPA500 Series IP Phones is affected by 8 known vulnerabilities: 3 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95557 - Memory corruption
CVE-2024-20453		 CWE-119 Medium
No
No
 - 08.08.2024 SB2024080848
#VU95556 - Memory corruption
CVE-2024-20451		 CWE-119 Medium
No
No
 - 08.08.2024 SB2024080848
#VU95551 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20454		 CWE-78 High
No
No
 - 08.08.2024 SB2024080848
#VU95550 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20452		 CWE-78 High
No
No
 - 08.08.2024 SB2024080848
#VU95548 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20450		 CWE-78 High
No
No
 - 08.08.2024 SB2024080848
#VU78441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20218		 CWE-79 Low
No
No
 - 20.07.2023 SB2023072009
#VU78440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20181		 CWE-79 Low
No
No
 - 20.07.2023 SB2023072009
#VU19286 - Command injection
CVE-2019-1923		 CWE-77 Low
No
No
 - 22.07.2019 SB2019072210