Cisco SPA112 Firmware 1.4.1 SR3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:spa112_firmware:1.4.1:sr3:*:*:*:*:*:*

part: o version: 1.4.1 update: sr3

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductSpa112 Firmware (9ec7c4d1-dc06-53dd-832c-1386ac465a4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15258 vulnerable 2026-06-08 05:12:56.903307 Cisco SPA100 Series Analog Telephone Adapters Web Management Interface Denial of Service Vulnerability
MEDIUM (6.5)
A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper validation of user-supplied requests to the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to cause the device to stop responding, requiring manual intervention for recovery.
Published: 2019-10-16T18:36:38.179Z
Updated: 2024-11-21T19:08:16.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15257 vulnerable 2026-06-08 05:12:56.902523 Cisco SPA100 Series Analog Telephone Adapters Running Configuration Information Disclosure Vulnerability
MEDIUM (6.5)
A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper restrictions on configuration information. An attacker could exploit this vulnerability by sending a request to an affected device through the web-based management interface. A successful exploit could allow the attacker to return running configuration information that could also include sensitive information.
Published: 2019-10-16T18:36:37.695Z
Updated: 2024-11-21T19:08:24.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15252 vulnerable 2026-06-08 05:12:56.859570 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
HIGH (8)
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Published: 2019-10-16T18:36:37.146Z
Updated: 2024-11-20T17:05:24.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15251 vulnerable 2026-06-08 05:12:56.854534 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
HIGH (8)
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Published: 2019-10-16T18:36:36.493Z
Updated: 2024-11-20T17:05:31.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15250 vulnerable 2026-06-08 05:12:56.853587 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
HIGH (8)
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Published: 2019-10-16T18:36:36.053Z
Updated: 2024-11-20T17:05:38.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15249 vulnerable 2026-06-08 05:12:56.852517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15248 vulnerable 2026-06-08 05:12:56.851559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15247 vulnerable 2026-06-08 05:12:56.850703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15246 vulnerable 2026-06-08 05:12:56.849841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15245 vulnerable 2026-06-08 05:12:56.848813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15244 vulnerable 2026-06-08 05:12:56.847835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15243 vulnerable 2026-06-08 05:12:56.847090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15242 vulnerable 2026-06-08 05:12:56.846133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15241 vulnerable 2026-06-08 05:12:56.845349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15240 vulnerable 2026-06-08 05:12:56.839419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12708 vulnerable 2026-06-08 05:12:40.243575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12704 vulnerable 2026-06-08 05:12:40.229198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12702 vulnerable 2026-06-08 05:12:40.222745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.