Cisco SPA112 Firmware 1.4.1 SR4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:spa112_firmware:1.4.1:sr4:*:*:*:*:*:*

part: o version: 1.4.1 update: sr4

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductSpa112 Firmware (9ec7c4d1-dc06-53dd-832c-1386ac465a4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15252 vulnerable 2026-06-08 05:12:56.859586 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
HIGH (8)
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Published: 2019-10-16T18:36:37.146Z
Updated: 2024-11-20T17:05:24.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15251 vulnerable 2026-06-08 05:12:56.854550 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
HIGH (8)
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Published: 2019-10-16T18:36:36.493Z
Updated: 2024-11-20T17:05:31.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15250 vulnerable 2026-06-08 05:12:56.853603 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
HIGH (8)
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Published: 2019-10-16T18:36:36.053Z
Updated: 2024-11-20T17:05:38.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15249 vulnerable 2026-06-08 05:12:56.852534 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
HIGH (8)
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Published: 2019-10-16T18:36:35.562Z
Updated: 2024-11-20T17:05:44.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15248 vulnerable 2026-06-08 05:12:56.851577 Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities
HIGH (8)
Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default.
Published: 2019-10-16T18:36:35.074Z
Updated: 2024-11-20T17:05:51.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15247 vulnerable 2026-06-08 05:12:56.850719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15246 vulnerable 2026-06-08 05:12:56.849858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15245 vulnerable 2026-06-08 05:12:56.848830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15244 vulnerable 2026-06-08 05:12:56.847852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15243 vulnerable 2026-06-08 05:12:56.847108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15242 vulnerable 2026-06-08 05:12:56.846150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15241 vulnerable 2026-06-08 05:12:56.845365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15240 vulnerable 2026-06-08 05:12:56.840022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.