peter bassill · operator
$ cve CVE-2024-20454 JSON

CVE-2024-20454

9.8
CRITICAL · CVSS 3.1 · EPSS 6.6% (pctl 94)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges. These vulnerabilities exist because incoming HTTP packets are not properly checked for errors, which could result in a buffer overflow. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to overflow an internal buffer and execute arbitrary commands at the root privilege level.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS6.6% — more likely to be exploited than 94% of all CVEs
WeaknessCWE-120
On CISA KEVno
Public exploitnone known
Published2024-08-07
Last modified2026-06-17

Affected (22)

VendorProduct
ciscospa 301 1 line ip phone
ciscospa 301 firmware
ciscospa 303 3 line ip phone
ciscospa 303 firmware
ciscospa 501g 8-line ip phone
ciscospa 501g firmware
ciscospa 502g 1-line ip phone
ciscospa 502g firmware
ciscospa 504g 4-line ip phone
ciscospa 504g firmware
ciscospa 508g 8-line ip phone
ciscospa 508g firmware
ciscospa 509g 12-line ip phone
ciscospa 509g firmware
ciscospa 512g 1-line ip phone
ciscospa 512g firmware
ciscospa 514g 4-line ip phone
ciscospa 514g firmware
ciscospa 525g 5-line ip phone
ciscospa 525g firmware
ciscospa 525g2 5-line ip phone
ciscospa 525g2 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD