Cisco SPA112 Firmware 1.4.1 SR1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:spa112_firmware:1.4.1:sr1:*:*:*:*:*:*

part: o version: 1.4.1 update: sr1

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductSpa112 Firmware (9ec7c4d1-dc06-53dd-832c-1386ac465a4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15258 vulnerable 2026-06-08 05:12:56.903272 Cisco SPA100 Series Analog Telephone Adapters Web Management Interface Denial of Service Vulnerability
MEDIUM (6.5)
A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper validation of user-supplied requests to the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the device to stop responding, requiring manual intervention for recovery.
Published: 2019-10-16T18:36:38.179Z
Updated: 2024-11-21T19:08:16.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15257 vulnerable 2026-06-08 05:12:56.902488 Cisco SPA100 Series Analog Telephone Adapters Running Configuration Information Disclosure Vulnerability
MEDIUM (6.5)
A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper restrictions on configuration information. An attacker could exploit this vulnerability by sending a request to an affected device through the web-based management interface. A successful exploit could allow the attacker to return running configuration information that could also include sensitive information.
Published: 2019-10-16T18:36:37.695Z
Updated: 2024-11-21T19:08:24.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15252 vulnerable 2026-06-08 05:12:56.859532 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
HIGH (8)
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Published: 2019-10-16T18:36:37.146Z
Updated: 2024-11-20T17:05:24.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15251 vulnerable 2026-06-08 05:12:56.854498 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
HIGH (8)
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Published: 2019-10-16T18:36:36.493Z
Updated: 2024-11-20T17:05:31.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15250 vulnerable 2026-06-08 05:12:56.853551 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
HIGH (8)
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Published: 2019-10-16T18:36:36.053Z
Updated: 2024-11-20T17:05:38.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15249 vulnerable 2026-06-08 05:12:56.852482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15248 vulnerable 2026-06-08 05:12:56.851526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15247 vulnerable 2026-06-08 05:12:56.850577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15246 vulnerable 2026-06-08 05:12:56.849807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15245 vulnerable 2026-06-08 05:12:56.848776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15244 vulnerable 2026-06-08 05:12:56.847802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15243 vulnerable 2026-06-08 05:12:56.847056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15242 vulnerable 2026-06-08 05:12:56.846102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15241 vulnerable 2026-06-08 05:12:56.845314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15240 vulnerable 2026-06-08 05:12:56.838421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12708 vulnerable 2026-06-08 05:12:40.243540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12704 vulnerable 2026-06-08 05:12:40.229163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12702 vulnerable 2026-06-08 05:12:40.221678 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.