{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-20451", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2023-11-08T15:08:07.679Z", "datePublished": "2024-08-07T16:48:37.184Z", "dateUpdated": "2024-08-07T17:24:11.420Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-08-07T16:48:57.555Z"}, "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly.\r\n\r\nThese vulnerabilities exist because HTTP packets are not properly checked for errors. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the remote interface of an affected device. A successful exploit could allow the attacker to cause a DoS condition on the device."}], "affected": [{"vendor": "Cisco", "product": "Cisco Small Business IP Phones", "versions": [{"version": "7.6.0", "status": "affected"}, {"version": "7.6.2", "status": "affected"}, {"version": "7.6.2SR3", "status": "affected"}, {"version": "7.6.2SR6", "status": "affected"}, {"version": "7.6.2SR2", "status": "affected"}, {"version": "7.6.2SR4", "status": "affected"}, {"version": "7.6.2SR1", "status": "affected"}, {"version": "7.6.2SR5", "status": "affected"}, {"version": "7.6.2SR7", "status": "affected"}, {"version": "7.6.1", "status": "affected"}, {"version": "7.3.7", "status": "affected"}, {"version": "7.5.5", "status": "affected"}, {"version": "7.5.6(XU)", "status": "affected"}, {"version": "7.5.2", "status": "affected"}, {"version": "7.5.2a", "status": "affected"}, {"version": "7.5.7", "status": "affected"}, {"version": "7.5.3", "status": "affected"}, {"version": "7.5.6", "status": "affected"}, {"version": "7.5.2b", "status": "affected"}, {"version": "7.5.6c", "status": "affected"}, {"version": "7.5.6a", "status": "affected"}, {"version": "7.5.7s", "status": "affected"}, {"version": "7.5.1", "status": "affected"}, {"version": "7.5.5a", "status": "affected"}, {"version": "7.5.5b", "status": "affected"}, {"version": "7.5.4", "status": "affected"}, {"version": "7.4.7", "status": "affected"}, {"version": "7.4.4", "status": "affected"}, {"version": "7.4.8", "status": "affected"}, {"version": "7.4.3", "status": "affected"}, {"version": "7.4.9", "status": "affected"}, {"version": "7.4.6", "status": "affected"}, {"version": "1.0.17", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "type": "cwe", "cweId": "CWE-120"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-http-vulns-RJZmX2Xz", "name": "cisco-sa-spa-http-vulns-RJZmX2Xz"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-spa-http-vulns-RJZmX2Xz", "discovery": "EXTERNAL", "defects": ["CSCwk31988"]}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-07T17:23:48.503152Z", "id": "CVE-2024-20451", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-07T17:24:11.420Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20451", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-07T17:23:48.503152Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-07T17:24:03.833Z"}}], "cna": {"source": {"defects": ["CSCwk31988"], "advisory": "cisco-sa-spa-http-vulns-RJZmX2Xz", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Small Business IP Phones", "versions": [{"status": "affected", "version": "7.6.0"}, {"status": "affected", "version": "7.6.2"}, {"status": "affected", "version": "7.6.2SR3"}, {"status": "affected", "version": "7.6.2SR6"}, {"status": "affected", "version": "7.6.2SR2"}, {"status": "affected", "version": "7.6.2SR4"}, {"status": "affected", "version": "7.6.2SR1"}, {"status": "affected", "version": "7.6.2SR5"}, {"status": "affected", "version": "7.6.2SR7"}, {"status": "affected", "version": "7.6.1"}, {"status": "affected", "version": "7.3.7"}, {"status": "affected", "version": "7.5.5"}, {"status": "affected", "version": "7.5.6(XU)"}, {"status": "affected", "version": "7.5.2"}, {"status": "affected", "version": "7.5.2a"}, {"status": "affected", "version": "7.5.7"}, {"status": "affected", "version": "7.5.3"}, {"status": "affected", "version": "7.5.6"}, {"status": "affected", "version": "7.5.2b"}, {"status": "affected", "version": "7.5.6c"}, {"status": "affected", "version": "7.5.6a"}, {"status": "affected", "version": "7.5.7s"}, {"status": "affected", "version": "7.5.1"}, {"status": "affected", "version": "7.5.5a"}, {"status": "affected", "version": "7.5.5b"}, {"status": "affected", "version": "7.5.4"}, {"status": "affected", "version": "7.4.7"}, {"status": "affected", "version": "7.4.4"}, {"status": "affected", "version": "7.4.8"}, {"status": "affected", "version": "7.4.3"}, {"status": "affected", "version": "7.4.9"}, {"status": "affected", "version": "7.4.6"}, {"status": "affected", "version": "1.0.17"}]}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-http-vulns-RJZmX2Xz", "name": "cisco-sa-spa-http-vulns-RJZmX2Xz"}], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly.\r\n\r\nThese vulnerabilities exist because HTTP packets are not properly checked for errors. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the remote interface of an affected device. A successful exploit could allow the attacker to cause a DoS condition on the device."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-120", "description": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-08-07T16:48:57.555Z"}}}, "cveMetadata": {"cveId": "CVE-2024-20451", "state": "PUBLISHED", "dateUpdated": "2024-08-07T17:24:11.420Z", "dateReserved": "2023-11-08T15:08:07.679Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2024-08-07T16:48:37.184Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa_301_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "697C8BBB-B1F4-4A5C-A070-48A3B15D191B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa_301_1_line_ip_phone:-:*:*:*:*:*:*:*", "matchCriteriaId": "EDF1A0FF-C0C1-4D74-BEF5-45A7AB770A64", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa_303_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F2EFA253-DE1A-471C-926B-0AED23CEAE3E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa_303_3_line_ip_phone:-:*:*:*:*:*:*:*", "matchCriteriaId": "B96F5E5F-1917-4D99-8A93-569BE4A04E20", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa_501g_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "45F07D08-E03B-4A90-85A7-D4279AAB3511", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa_501g_8-line_ip_phone:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C8A2149-0224-468F-A8B2-EE7B958544E0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa_502g_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E1DE94BF-003A-4E4D-8DEC-B2424DDD315A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa_502g_1-line_ip_phone:-:*:*:*:*:*:*:*", "matchCriteriaId": "89E82EB4-8272-4660-9FEB-ED0751AAF7D4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa_504g_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0FECDC17-06B4-45FA-A5DB-E4F8D6A7A98C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa_504g_4-line_ip_phone:-:*:*:*:*:*:*:*", "matchCriteriaId": "526D3186-83F0-4001-8643-2AFE18C65740", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa_508g_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AC0B806A-DE74-41F1-9C67-696F6B5C49B2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa_508g_8-line_ip_phone:-:*:*:*:*:*:*:*", "matchCriteriaId": "26711CC8-5B99-4CFA-8C1B-62CA4ABBE828", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa_509g_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A016EA95-FD42-45A2-B219-523F5B153020", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa_509g_12-line_ip_phone:-:*:*:*:*:*:*:*", "matchCriteriaId": "0CCDEBE5-EBD7-4C62-AFAD-DB716412F0C3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa_512g_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "74DD7845-D19C-401D-B029-967FFE911BDD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa_512g_1-line_ip_phone:-:*:*:*:*:*:*:*", "matchCriteriaId": "2ABA7665-EF17-4B62-8415-B2DC0CFA92BD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa_514g_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1C144A2E-9E18-4274-91E3-B08F3B68C120", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa_514g_4-line_ip_phone:-:*:*:*:*:*:*:*", "matchCriteriaId": "E2B7B70D-5054-4857-A0D4-54244E27F506", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa_525g_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0DE79788-8729-4B6F-A1B7-6FB14680CA90", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa_525g_5-line_ip_phone:-:*:*:*:*:*:*:*", "matchCriteriaId": "AFF07D3E-5441-48C3-9E04-78BC722D535A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa_525g2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CC4E91E7-1208-43EC-8239-C243C2BD976A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa_525g2_5-line_ip_phone:-:*:*:*:*:*:*:*", "matchCriteriaId": "516C7E78-E23B-4ECD-8FB6-EADF9D0E40C7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly.\r\n\r\nThese vulnerabilities exist because HTTP packets are not properly checked for errors. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the remote interface of an affected device. A successful exploit could allow the attacker to cause a DoS condition on the device."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades en la interfaz de administraci\u00f3n basada en web de los tel\u00e9fonos IP Cisco Small Business serie SPA300 y los tel\u00e9fonos IP Cisco Small Business serie SPA500 podr\u00edan permitir que un atacante remoto no autenticado provoque que un dispositivo afectado se recargue inesperadamente. Estas vulnerabilidades existen porque los paquetes HTTP no se verifican adecuadamente en busca de errores. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando un paquete HTTP manipulado a la interfaz remota de un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante provocar una condici\u00f3n DoS en el dispositivo."}], "id": "CVE-2024-20451", "lastModified": "2024-08-23T18:14:11.137", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "ykramarz@cisco.com", "type": "Secondary"}]}, "published": "2024-08-07T17:15:50.493", "references": [{"source": "ykramarz@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-http-vulns-RJZmX2Xz"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-120"}], "source": "ykramarz@cisco.com", "type": "Secondary"}]}

{}