CVE-2023-20218 (GCVE-0-2023-20218)
Vulnerability from cvelistv5 – Published: 2023-08-03 21:20 – Updated: 2024-10-17 14:59
VLAI
EPSS
VEX
Summary
A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to to modify a web page in the context of a user's browser.
This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious websites, or the attacker could use this vulnerability to conduct further client-side attacks.
Cisco will not release software updates that address this vulnerability.
{{value}} ["%7b%7bvalue%7d%7d"])}]]
Severity
5.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-10-17 14:58 UTC
CWE
- CWE-80 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Cisco | Cisco Small Business IP Phones |
Affected:
7.6.0
Affected: 7.6.2 Affected: 7.6.2SR3 Affected: 7.6.2SR6 Affected: 7.6.2SR2 Affected: 7.6.2SR4 Affected: 7.6.2SR1 Affected: 7.6.2SR5 Affected: 7.6.2SR7 Affected: 7.6.1 Affected: 7.3.7 Affected: 7.5.5 Affected: 7.5.6(XU) Affected: 7.5.2 Affected: 7.5.2a Affected: 7.5.7 Affected: 7.5.3 Affected: 7.5.6 Affected: 7.5.2b Affected: 7.5.6c Affected: 7.5.6a Affected: 7.5.7s Affected: 7.5.1 Affected: 7.5.5a Affected: 7.5.5b Affected: 7.5.4 Affected: 7.4.7 Affected: 7.4.4 Affected: 7.4.8 Affected: 7.4.3 Affected: 7.4.9 Affected: 7.4.6 |
guessed |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T09:05:36.868Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-spa-web-multi-7kvPmu2F",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-web-multi-7kvPmu2F"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-20218",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-17T14:58:32.797326Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-10-17T14:59:14.948Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Cisco Small Business IP Phones",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.6.2SR3"
},
{
"status": "affected",
"version": "7.6.2SR6"
},
{
"status": "affected",
"version": "7.6.2SR2"
},
{
"status": "affected",
"version": "7.6.2SR4"
},
{
"status": "affected",
"version": "7.6.2SR1"
},
{
"status": "affected",
"version": "7.6.2SR5"
},
{
"status": "affected",
"version": "7.6.2SR7"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.3.7"
},
{
"status": "affected",
"version": "7.5.5"
},
{
"status": "affected",
"version": "7.5.6(XU)"
},
{
"status": "affected",
"version": "7.5.2"
},
{
"status": "affected",
"version": "7.5.2a"
},
{
"status": "affected",
"version": "7.5.7"
},
{
"status": "affected",
"version": "7.5.3"
},
{
"status": "affected",
"version": "7.5.6"
},
{
"status": "affected",
"version": "7.5.2b"
},
{
"status": "affected",
"version": "7.5.6c"
},
{
"status": "affected",
"version": "7.5.6a"
},
{
"status": "affected",
"version": "7.5.7s"
},
{
"status": "affected",
"version": "7.5.1"
},
{
"status": "affected",
"version": "7.5.5a"
},
{
"status": "affected",
"version": "7.5.5b"
},
{
"status": "affected",
"version": "7.5.4"
},
{
"status": "affected",
"version": "7.4.7"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.4.8"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.4.9"
},
{
"status": "affected",
"version": "7.4.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to to modify a web page in the context of a user\u0027s browser.\r\n\r This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious websites, or the attacker could use this vulnerability to conduct further client-side attacks.\r\n\r Cisco will not release software updates that address this vulnerability. \r\n\r {{value}} [\"%7b%7bvalue%7d%7d\"])}]]"
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-80",
"description": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-01-25T16:58:22.717Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-spa-web-multi-7kvPmu2F",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-web-multi-7kvPmu2F"
}
],
"source": {
"advisory": "cisco-sa-spa-web-multi-7kvPmu2F",
"defects": [
"CSCwf82071"
],
"discovery": "EXTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2023-20218",
"datePublished": "2023-08-03T21:20:29.588Z",
"dateReserved": "2022-10-27T18:47:50.368Z",
"dateUpdated": "2024-10-17T14:59:14.948Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-20218",
"date": "2026-09-16",
"epss": "0.00453",
"percentile": "0.38471"
},
"fkie_nvd": {
"configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa500ds_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EFBF9231-128E-4528-AAB9-75673CA4C525\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa500ds:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9C7B9304-CCA9-41C0-A6B9-032DC923420C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa500s_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0E5E2A30-128B-4EE9-A232-9216D38E2A66\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa500s:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"66B2A148-467A-4F10-945C-1F49A218BD4F\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa501g_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"22F20D5D-F409-400B-9A9B-6B243CA40525\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa501g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"73B67905-79ED-4771-B436-49868BA7C922\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa502g_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"060BFBB6-B6F7-4C77-B572-DF37EDA0E4DE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa502g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D371387F-C7CC-46BB-85E9-419EF97D2A00\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa504g_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"58D423B5-88EE-40A3-A9F3-240D9431B1D9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa504g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D3FE12AB-1CC7-450D-88F2-7B06C51DCE7C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa508g_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BF9F406D-1144-4B59-88A7-6A3157BAE785\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa508g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F38FDFF1-AD9D-40E1-A232-4B08AE0C4ABC\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa509g_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E3746023-AA04-4ACB-AFD0-3EB6556DA5BF\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa509g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7C04DA66-1516-40ED-B8AC-504F8B2B1E88\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa512g_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8337AA54-2683-425F-A0E7-3637B65F15AE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa512g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"92A92FEE-7CB5-43B1-8AC3-00C077DD4A63\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa514g_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FEE2B80D-E782-4CE0-8FB0-840BBA2C1DEE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa514g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16C4089F-5B9F-4D69-8819-43B52309454F\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa525_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C4EF9778-0B64-4D42-AFEB-58F2B61AF085\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa525:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"452622A5-5A5A-40F2-AD69-4158FEA1309E\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa525g_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1668FAAF-CFC0-4C42-B1A3-0649BD1CBCFD\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa525g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B5602EAB-6507-4B5B-A05B-4FED970B43D0\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:spa525g2_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5E1DDD99-5739-4B61-B468-F40F3AC454FA\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:cisco:spa525g2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"58E0A339-CE89-4D27-B08D-BF151C9FF086\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to to modify a web page in the context of a user\u0027s browser.\\r\\n\\r This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious websites, or the attacker could use this vulnerability to conduct further client-side attacks.\\r\\n\\r Cisco will not release software updates that address this vulnerability. \\r\\n\\r {{value}} [\\\"%7b%7bvalue%7d%7d\\\"])}]]\"}]",
"id": "CVE-2023-20218",
"lastModified": "2024-11-21T07:40:55.383",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"ykramarz@cisco.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N\", \"baseScore\": 5.8, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 1.4}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\", \"baseScore\": 6.1, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 2.7}]}",
"published": "2023-08-03T22:15:11.770",
"references": "[{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-web-multi-7kvPmu2F\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-web-multi-7kvPmu2F\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "ykramarz@cisco.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"ykramarz@cisco.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-80\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-79\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-20218\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2023-08-03T22:15:11.770\",\"lastModified\":\"2026-06-17T05:29:56.880\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to to modify a web page in the context of a user\u0027s browser.\\r\\n\\r This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious websites, or the attacker could use this vulnerability to conduct further client-side attacks.\\r\\n\\r Cisco will not release software updates that address this vulnerability. \\r\\n\\r {{value}} [\\\"%7b%7bvalue%7d%7d\\\"])}]]\"}],\"affected\":[{\"source\":\"psirt@cisco.com\",\"affectedData\":[{\"vendor\":\"Cisco\",\"product\":\"Cisco Small Business IP Phones\",\"versions\":[{\"version\":\"7.6.0\",\"status\":\"affected\"},{\"version\":\"7.6.2\",\"status\":\"affected\"},{\"version\":\"7.6.2SR3\",\"status\":\"affected\"},{\"version\":\"7.6.2SR6\",\"status\":\"affected\"},{\"version\":\"7.6.2SR2\",\"status\":\"affected\"},{\"version\":\"7.6.2SR4\",\"status\":\"affected\"},{\"version\":\"7.6.2SR1\",\"status\":\"affected\"},{\"version\":\"7.6.2SR5\",\"status\":\"affected\"},{\"version\":\"7.6.2SR7\",\"status\":\"affected\"},{\"version\":\"7.6.1\",\"status\":\"affected\"},{\"version\":\"7.3.7\",\"status\":\"affected\"},{\"version\":\"7.5.5\",\"status\":\"affected\"},{\"version\":\"7.5.6(XU)\",\"status\":\"affected\"},{\"version\":\"7.5.2\",\"status\":\"affected\"},{\"version\":\"7.5.2a\",\"status\":\"affected\"},{\"version\":\"7.5.7\",\"status\":\"affected\"},{\"version\":\"7.5.3\",\"status\":\"affected\"},{\"version\":\"7.5.6\",\"status\":\"affected\"},{\"version\":\"7.5.2b\",\"status\":\"affected\"},{\"version\":\"7.5.6c\",\"status\":\"affected\"},{\"version\":\"7.5.6a\",\"status\":\"affected\"},{\"version\":\"7.5.7s\",\"status\":\"affected\"},{\"version\":\"7.5.1\",\"status\":\"affected\"},{\"version\":\"7.5.5a\",\"status\":\"affected\"},{\"version\":\"7.5.5b\",\"status\":\"affected\"},{\"version\":\"7.5.4\",\"status\":\"affected\"},{\"version\":\"7.4.7\",\"status\":\"affected\"},{\"version\":\"7.4.4\",\"status\":\"affected\"},{\"version\":\"7.4.8\",\"status\":\"affected\"},{\"version\":\"7.4.3\",\"status\":\"affected\"},{\"version\":\"7.4.9\",\"status\":\"affected\"},{\"version\":\"7.4.6\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N\",\"baseScore\":5.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":2.7}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-10-17T14:58:32.797326Z\",\"id\":\"CVE-2023-20218\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-80\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa500ds_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EFBF9231-128E-4528-AAB9-75673CA4C525\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa500ds:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C7B9304-CCA9-41C0-A6B9-032DC923420C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa500s_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E5E2A30-128B-4EE9-A232-9216D38E2A66\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa500s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66B2A148-467A-4F10-945C-1F49A218BD4F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa501g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22F20D5D-F409-400B-9A9B-6B243CA40525\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa501g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73B67905-79ED-4771-B436-49868BA7C922\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa502g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"060BFBB6-B6F7-4C77-B572-DF37EDA0E4DE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa502g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D371387F-C7CC-46BB-85E9-419EF97D2A00\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa504g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"58D423B5-88EE-40A3-A9F3-240D9431B1D9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa504g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3FE12AB-1CC7-450D-88F2-7B06C51DCE7C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa508g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF9F406D-1144-4B59-88A7-6A3157BAE785\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa508g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F38FDFF1-AD9D-40E1-A232-4B08AE0C4ABC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa509g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3746023-AA04-4ACB-AFD0-3EB6556DA5BF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa509g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C04DA66-1516-40ED-B8AC-504F8B2B1E88\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa512g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8337AA54-2683-425F-A0E7-3637B65F15AE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa512g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92A92FEE-7CB5-43B1-8AC3-00C077DD4A63\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa514g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEE2B80D-E782-4CE0-8FB0-840BBA2C1DEE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa514g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16C4089F-5B9F-4D69-8819-43B52309454F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa525_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4EF9778-0B64-4D42-AFEB-58F2B61AF085\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa525:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"452622A5-5A5A-40F2-AD69-4158FEA1309E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa525g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1668FAAF-CFC0-4C42-B1A3-0649BD1CBCFD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa525g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5602EAB-6507-4B5B-A05B-4FED970B43D0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:spa525g2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E1DDD99-5739-4B61-B468-F40F3AC454FA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:spa525g2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"58E0A339-CE89-4D27-B08D-BF151C9FF086\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-web-multi-7kvPmu2F\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-web-multi-7kvPmu2F\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
"redhat_vex": {
"current_release_date": "2025-05-28T22:30:27+00:00",
"cve": "CVE-2023-20218",
"id": "CVE-2023-20218",
"initial_release_date": "2023-01-01T00:00:00+00:00",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "CVE-2023-20218",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-20218.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-web-multi-7kvPmu2F\", \"name\": \"cisco-sa-spa-web-multi-7kvPmu2F\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T09:05:36.868Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-20218\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-17T14:58:32.797326Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-17T14:59:04.222Z\"}}], \"cna\": {\"source\": {\"defects\": [\"CSCwf82071\"], \"advisory\": \"cisco-sa-spa-web-multi-7kvPmu2F\", \"discovery\": \"EXTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 5.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Small Business IP Phones\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.6.0\"}, {\"status\": \"affected\", \"version\": \"7.6.2\"}, {\"status\": \"affected\", \"version\": \"7.6.2SR3\"}, {\"status\": \"affected\", \"version\": \"7.6.2SR6\"}, {\"status\": \"affected\", \"version\": \"7.6.2SR2\"}, {\"status\": \"affected\", \"version\": \"7.6.2SR4\"}, {\"status\": \"affected\", \"version\": \"7.6.2SR1\"}, {\"status\": \"affected\", \"version\": \"7.6.2SR5\"}, {\"status\": \"affected\", \"version\": \"7.6.2SR7\"}, {\"status\": \"affected\", \"version\": \"7.6.1\"}, {\"status\": \"affected\", \"version\": \"7.3.7\"}, {\"status\": \"affected\", \"version\": \"7.5.5\"}, {\"status\": \"affected\", \"version\": \"7.5.6(XU)\"}, {\"status\": \"affected\", \"version\": \"7.5.2\"}, {\"status\": \"affected\", \"version\": \"7.5.2a\"}, {\"status\": \"affected\", \"version\": \"7.5.7\"}, {\"status\": \"affected\", \"version\": \"7.5.3\"}, {\"status\": \"affected\", \"version\": \"7.5.6\"}, {\"status\": \"affected\", \"version\": \"7.5.2b\"}, {\"status\": \"affected\", \"version\": \"7.5.6c\"}, {\"status\": \"affected\", \"version\": \"7.5.6a\"}, {\"status\": \"affected\", \"version\": \"7.5.7s\"}, {\"status\": \"affected\", \"version\": \"7.5.1\"}, {\"status\": \"affected\", \"version\": \"7.5.5a\"}, {\"status\": \"affected\", \"version\": \"7.5.5b\"}, {\"status\": \"affected\", \"version\": \"7.5.4\"}, {\"status\": \"affected\", \"version\": \"7.4.7\"}, {\"status\": \"affected\", \"version\": \"7.4.4\"}, {\"status\": \"affected\", \"version\": \"7.4.8\"}, {\"status\": \"affected\", \"version\": \"7.4.3\"}, {\"status\": \"affected\", \"version\": \"7.4.9\"}, {\"status\": \"affected\", \"version\": \"7.4.6\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-web-multi-7kvPmu2F\", \"name\": \"cisco-sa-spa-web-multi-7kvPmu2F\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to to modify a web page in the context of a user\u0027s browser.\\r\\n\\r This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious websites, or the attacker could use this vulnerability to conduct further client-side attacks.\\r\\n\\r Cisco will not release software updates that address this vulnerability. \\r\\n\\r {{value}} [\\\"%7b%7bvalue%7d%7d\\\"])}]]\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-80\", \"description\": \"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2024-01-25T16:58:22.717Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-20218\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-10-17T14:59:14.948Z\", \"dateReserved\": \"2022-10-27T18:47:50.368Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2023-08-03T21:20:29.588Z\", \"assignerShortName\": \"cisco\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…