Cisco SPA300/500 IP Phones Web UI Arbitrary Command Execution and DoS Vulnerabilities

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Type: - SPA300 Series and SPA500 Series IP Phones Web UI Vulnerabilities: These vulnerabilities exist in the Web UI of Cisco Small Business SPA300 Series and SPA500 Series IP phones. 2. Vulnerability Severity: - Critical: These vulnerabilities are marked as "Critical," indicating they pose a severe threat to system security. 3. Vulnerability Description: - SPA300 Series and SPA500 Series IP Phones Web UI Arbitrary Command Execution Vulnerability: These vulnerabilities allow attackers to execute arbitrary commands without authentication, thereby gaining root access to the underlying operating system. - SPA300 Series and SPA500 Series IP Phones Web UI DoS Vulnerability: These vulnerabilities allow attackers to cause affected devices to reload by sending crafted HTTP requests, resulting in service disruption. 4. Affected Products: - SPA300 Series and SPA500 Series IP Phones: These vulnerabilities affect all software versions running on SPA300 Series and SPA500 Series IP phones, regardless of configuration. 5. Vulnerability Details: - SPA300 Series and SPA500 Series IP Phones Web UI Arbitrary Command Execution Vulnerability: These vulnerabilities arise due to improper error checking in HTTP packets, leading to buffer overflow. Attackers can exploit these vulnerabilities by sending crafted HTTP requests. - SPA300 Series and SPA500 Series IP Phones Web UI DoS Vulnerability: These vulnerabilities also stem from improper error checking in HTTP packets, causing buffer overflow. Attackers can exploit them by sending crafted HTTP requests, leading to service disruption. 6. Remediation: - End-of-Life and End-of-Life Announcement for the Cisco IP Phones SPA300 Series Selected Models: Cisco has announced the end-of-life for these products and provided corresponding announcements. - End-of-Life and End-of-Life Announcement for the Cisco Small Business SPA303 Series IP Phone: Cisco also provided an end-of-life announcement for the SPA303 Series IP phone. - End-of-Life and End-of-Life Announcement for All Remaining Cisco Small Business SPA500 Series IP Phones: Cisco also provided end-of-life announcements for all remaining SPA500 Series IP phones. 7. Source: - Aidan of BAE Systems Digital Intelligence: These vulnerabilities were reported by Aidan from BAE Systems Digital Intelligence. 8. URL: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-http-vulns-RJZmX2Xz: This is the URL to the detailed vulnerability information page. This information helps users understand the severity of the vulnerability, the affected products, the technical details, and potential remediation steps.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco SPA300/500 IP Phones Web UI Arbitrary Command Execution and DoS Vulnerabilities