Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.

N/A

内存缓冲区边界内操作的限制不恰当

Cisco SPA100 Series Analog Telephone Adapters 缓冲区错误漏洞

Cisco SPA100 Series Analog Telephone Adapters（ATAs）是美国思科（Cisco）公司的一款SPA100系列模拟电话适配器。 Cisco SPA100 Series ATAs中存在缓冲区错误漏洞，该漏洞源于程序没有正确验证用户提交的输入。攻击者可通过对该管理界面进行身份验证并发送特制的请求利用该漏洞以提升的权限执行任意代码。

N/A

N/A