Description
A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to to modify a web page in the context of a user's browser. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious websites, or the attacker could use this vulnerability to conduct further client-side attacks. Cisco will not release software updates that address this vulnerability. {{value}} ["%7b%7bvalue%7d%7d"])}]]
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco Small Business IP Phones
7.6.0affected7.6.2affected7.6.2SR3affected7.6.2SR6affected7.6.2SR2affected7.6.2SR4affected7.6.2SR1affected7.6.2SR5affected7.6.2SR7affected7.6.1affected7.3.7affected7.5.5affected7.5.6(XU)affected7.5.2affected7.5.2aaffected7.5.7affected7.5.3affected7.5.6affected7.5.2baffected7.5.6caffected7.5.6aaffected7.5.7saffected7.5.1affected7.5.5aaffected7.5.5baffected7.5.4affected7.4.7affected7.4.4affected7.4.8affected7.4.3affected7.4.9affected7.4.6affected