{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-19T13:17:41.023","vulnerabilities":[{"cve":{"id":"CVE-2024-20451","sourceIdentifier":"psirt@cisco.com","published":"2024-08-07T17:15:50.493","lastModified":"2024-08-23T18:14:11.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly.\r\n\r\nThese vulnerabilities exist because HTTP packets are not properly checked for errors. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the remote interface of an affected device. A successful exploit could allow the attacker to cause a DoS condition on the device."},{"lang":"es","value":"Múltiples vulnerabilidades en la interfaz de administración basada en web de los teléfonos IP Cisco Small Business serie SPA300 y los teléfonos IP Cisco Small Business serie SPA500 podrían permitir que un atacante remoto no autenticado provoque que un dispositivo afectado se recargue inesperadamente. Estas vulnerabilidades existen porque los paquetes HTTP no se verifican adecuadamente en busca de errores. Un atacante podría aprovechar esta vulnerabilidad enviando un paquete HTTP manipulado a la interfaz remota de un dispositivo afectado. Un exploit exitoso podría permitir al atacante provocar una condición DoS en el dispositivo."}],"metrics":{"cvssMetricV31":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"psirt@cisco.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:spa_301_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"697C8BBB-B1F4-4A5C-A070-48A3B15D191B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:spa_301_1_line_ip_phone:-:*:*:*:*:*:*:*","matchCriteriaId":"EDF1A0FF-C0C1-4D74-BEF5-45A7AB770A64"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:spa_303_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F2EFA253-DE1A-471C-926B-0AED23CEAE3E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:spa_303_3_line_ip_phone:-:*:*:*:*:*:*:*","matchCriteriaId":"B96F5E5F-1917-4D99-8A93-569BE4A04E20"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:spa_501g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"45F07D08-E03B-4A90-85A7-D4279AAB3511"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:spa_501g_8-line_ip_phone:-:*:*:*:*:*:*:*","matchCriteriaId":"6C8A2149-0224-468F-A8B2-EE7B958544E0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:spa_502g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E1DE94BF-003A-4E4D-8DEC-B2424DDD315A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:spa_502g_1-line_ip_phone:-:*:*:*:*:*:*:*","matchCriteriaId":"89E82EB4-8272-4660-9FEB-ED0751AAF7D4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:spa_504g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0FECDC17-06B4-45FA-A5DB-E4F8D6A7A98C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:spa_504g_4-line_ip_phone:-:*:*:*:*:*:*:*","matchCriteriaId":"526D3186-83F0-4001-8643-2AFE18C65740"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:spa_508g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"AC0B806A-DE74-41F1-9C67-696F6B5C49B2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:spa_508g_8-line_ip_phone:-:*:*:*:*:*:*:*","matchCriteriaId":"26711CC8-5B99-4CFA-8C1B-62CA4ABBE828"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:spa_509g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A016EA95-FD42-45A2-B219-523F5B153020"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:spa_509g_12-line_ip_phone:-:*:*:*:*:*:*:*","matchCriteriaId":"0CCDEBE5-EBD7-4C62-AFAD-DB716412F0C3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:spa_512g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"74DD7845-D19C-401D-B029-967FFE911BDD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:spa_512g_1-line_ip_phone:-:*:*:*:*:*:*:*","matchCriteriaId":"2ABA7665-EF17-4B62-8415-B2DC0CFA92BD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:spa_514g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1C144A2E-9E18-4274-91E3-B08F3B68C120"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:spa_514g_4-line_ip_phone:-:*:*:*:*:*:*:*","matchCriteriaId":"E2B7B70D-5054-4857-A0D4-54244E27F506"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:spa_525g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0DE79788-8729-4B6F-A1B7-6FB14680CA90"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:spa_525g_5-line_ip_phone:-:*:*:*:*:*:*:*","matchCriteriaId":"AFF07D3E-5441-48C3-9E04-78BC722D535A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:spa_525g2_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"CC4E91E7-1208-43EC-8239-C243C2BD976A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:spa_525g2_5-line_ip_phone:-:*:*:*:*:*:*:*","matchCriteriaId":"516C7E78-E23B-4ECD-8FB6-EADF9D0E40C7"}]}]}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-http-vulns-RJZmX2Xz","source":"psirt@cisco.com","tags":["Vendor Advisory"]}]}}]}