漏洞标题
Cisco SPA100 系列模拟电话适配器远程代码执行漏洞
漏洞描述信息
Cisco SPA100系列模拟电话适配器（ATAs）存在多个漏洞，认证后的相邻攻击者可能利用这些漏洞以提升的权限执行任意代码。这些漏洞是由于对Web管理界面中用户提供的输入验证不足导致的。攻击者可能通过以下步骤利用这些漏洞：对Web管理界面进行认证，然后向受影响设备发送精心构造的请求。成功利用这些漏洞后，攻击者可能以提升的权限执行任意代码。注意：Web管理界面默认启用。
CVSS信息
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
漏洞描述信息
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
CVSS信息
N/A
漏洞类别
内存缓冲区边界内操作的限制不恰当
漏洞标题
Cisco SPA100 Series Analog Telephone Adapters 缓冲区错误漏洞
漏洞描述信息
Cisco SPA100 Series Analog Telephone Adapters（ATAs）是美国思科（Cisco）公司的一款SPA100系列模拟电话适配器。 Cisco SPA100 Series ATAs中存在缓冲区错误漏洞，该漏洞源于程序没有正确验证用户提交的输入。攻击者可通过对该管理界面进行身份验证并发送特制的请求利用该漏洞以提升的权限执行任意代码。
CVSS信息
N/A
漏洞类别
缓冲区错误