Known vulnerabilities in Small Business SPA300
Vendor:
Cisco Systems, Inc
Software:
Small Business SPA300
Software CPE:
cpe:2.3:h:cisco_systems:small_business_spa300:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU95557 - Memory corruption CVE-2024-20453 |
CWE-119 | Medium | - | 08.08.2024 |
SB2024080848 |
||
| #VU95556 - Memory corruption CVE-2024-20451 |
CWE-119 | Medium | - | 08.08.2024 |
SB2024080848 |
||
| #VU95551 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-20454 |
CWE-78 | High | - | 08.08.2024 |
SB2024080848 |
||
| #VU95550 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-20452 |
CWE-78 | High | - | 08.08.2024 |
SB2024080848 |
||
| #VU95548 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-20450 |
CWE-78 | High | - | 08.08.2024 |
SB2024080848 |
||
| #VU8893 - Cross-Site Request Forgery (CSRF) CVE-2017-12271 |
CWE-352 | Low | - | 19.10.2017 |
SB2017101908 |
||
| #VU8559 - Improper input validation CVE-2017-12219 |
CWE-20 | Low | - | 21.09.2017 |
SB2017092106 |