Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.

The remote Cisco SPA100 Series device is affected by multiple vulnerabilities:

  - Multiple remote code execution vulnerabilities. An authenticated attacker can cause a stack overflow leading to     control flow change in the Cisco SPA 112/122 device. (CVE-2019-15240, CVE-2019-15241, CVE-2019-15242,     CVE-2019-15243, CVE-2019-15244, CVE-2019-15245, CVE-2019-15246, CVE-2019-15247, CVE-2019-15248, CVE-2019-15249,     CVE-2019-15250, CVE-2019-15251, CVE-2019-15252)

  - Multiple cross-site scripting vulnerabilities. An authenticated attacker can inject javascript on the Cisco SPA     112/122 device. (CVE-2019-12702, CVE-2019-12703)

  - An arbitrary file disclosure vulnerability. An unauthenticated attacker can read any file on the device and     elevate local privilege. (CVE-2019-12704)

  - Multiple privilege escalation vulnerabilites. An authenticated attacker can leak the administrator password     hash to escalate local privilege. (CVE-2019-12708, CVE-2019-15257)

  - A denial of service vulnerability. An authenticated attacker can crash the web service with a malformed     request. (CVE-2019-12258)

Detections

Analytics

CVE-2019-15243

high

Tenable Plugins

high