Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2882▼ 181 respecto a la semana anterior

Críticas / altas1279▼ 60 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)487▼ 22 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-12271	Modificada	Alta (8.8)	0.98%	—	Cisco Spa300 Firmware Cisco Spa500 Firmware	19/10/2017	17/6/2026	A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection. An attacker could exploit this vulnerability by tricking the user of a web…
CVE-2016-1469	Modificada	Alta (7.5)	3.0%	—	Cisco Spa300 Firmware Cisco Spa500 Firmware	12/9/2016	17/6/2026	The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (device outage) via a series of malformed HTTP requests, aka Bug ID CSCut67385.
CVE-2015-6403	Modificada	Alta (7.2)	0.38%	—	Cisco Spa500 Firmware Cisco Spa300 Firmware	15/12/2015	17/6/2026	The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400.
CVE-2015-0670	Modificada	Media (6.4)	1.8%	—	Cisco Spa500 Firmware Cisco SPA 501g 8-line IP Phone Cisco SPA 502g 1-line IP Phone Cisco SPA 504g 4-line IP Phone+11	21/3/2015	17/6/2026	The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482.