Spa500 firmware

This hub aggregates every CVE we track for Spa500 firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Spa500 firmware.

• CVE-2019-1683Cisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation Vulnerability7.4Feb 25, 2019
• CVE-2017-12271A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of ...8.8Oct 19, 2017
• CVE-2016-1469The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (device outage) via a series of malformed HTTP requests, aka Bug ID CSCut67385.7.5Sep 12, 2016
• CVE-2015-6403The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leve...7.2Dec 15, 2015
• CVE-2015-0670The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or orig...6.4Mar 21, 2015