Medium severity6.1NVD Advisory· Published Aug 3, 2023· Updated Jun 17, 2026
CVE-2023-20181
CVE-2023-20181
Description
A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct XSS attacks. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14- cpe:2.3:o:cisco:spa500ds_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:spa500s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:spa501g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:spa502g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:spa504g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:spa508g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:spa509g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:spa512g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:spa514g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:spa525_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:spa525g2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:spa525g_firmware:-:*:*:*:*:*:*:*
- Range: 7.6.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.