cisco-sa-spa-web-multi-7kvPmu2F
Cisco Small Business SPA500 Series IP Phones Web UI Vulnerabilities
Medium · Updated · Cisco
2 products with CSAF evidence
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) or HTML injection attacks. For more information about these vulnerabilities, see the Details section of this advisory. There are no workarounds that address these vulnerabilities.