Description

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly. These vulnerabilities exist because HTTP packets are not properly checked for errors. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the remote interface of an affected device. A successful exploit could allow the attacker to cause a DoS condition on the device.

INFO

Published Date :

2024-08-07T16:48:37.184Z

Last Modified :

2024-08-07T17:24:11.420Z

Source :

cisco
AFFECTED PRODUCTS

The following products are affected by CVE-2024-20451 vulnerability.

Vendors Products
Cisco
  • Spa 301 1 Line Ip Phone
  • Spa 301 Firmware
  • Spa 303 3 Line Ip Phone
  • Spa 303 Firmware
  • Spa 501g 8-line Ip Phone
  • Spa 501g Firmware
  • Spa 502g 1-line Ip Phone
  • Spa 502g Firmware
  • Spa 504g 4-line Ip Phone
  • Spa 504g Firmware
  • Spa 508g 8-line Ip Phone
  • Spa 508g Firmware
  • Spa 509g 12-line Ip Phone
  • Spa 509g Firmware
  • Spa 512g 1-line Ip Phone
  • Spa 512g Firmware
  • Spa 514g 4-line Ip Phone
  • Spa 514g Firmware
  • Spa 525g2 5-line Ip Phone
  • Spa 525g2 Firmware
  • Spa 525g 5-line Ip Phone
  • Spa 525g Firmware
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-20451.

URL Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-http-vulns-RJZmX2Xz cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact