CVE-2024-20454 Memory corruption in Cisco Small Business IP Phones
Unauthenticated remote attackers can execute arbitrary commands with root privileges on Cisco Small Business IP Phones via buffer overflow in the web interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-20454?
CVE-2024-20454 is a critical memory corruption vulnerability in Cisco Small Business IP Phones, published on 7 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges. These vulnerabilities exist because incoming HTTP packets are not properly checked for errors, which could result in a buffer overflow. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to overflow an internal buffer and execute arbitrary commands at the root privilege level.
Weakness: CWE-120
Which versions are affected by CVE-2024-20454?
It affects 11 products.
Products include Cisco Spa 301 Firmware, Cisco Spa 303 Firmware, Cisco Spa 501g Firmware, Cisco Spa 502g Firmware, Cisco Spa 504g Firmware, Cisco Spa 508g Firmware and 5 more.
How do I fix CVE-2024-20454?
No fix has been published for CVE-2024-20454 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-20454 being exploited?
There is no known exploitation of CVE-2024-20454 in the wild and no public exploit code.
Other vulnerabilities in Cisco Small Business IP Phones
Sources
Also known as GHSA-5f4q-cvpm-g6rh.