CVE-2019-15257

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper restrictions on configuration information. An attacker could exploit this vulnerability by sending a request to an affected device through the web-based management interface. A successful exploit could allow the attacker to return running configuration information that could also include sensitive information.

CVSS v3 6.5 MEDIUM
CVSS v2.0 4.0 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-spa-running-config	Vendor Advisory
https://www.tenable.com/security/research/tra-2019-44	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:spa112_firmware::::::::
	cpe:2.3:o:cisco:spa112_firmware:1.4.1:-::::::
	cpe:2.3:o:cisco:spa112_firmware:1.4.1:sr1::::::
	cpe:2.3:o:cisco:spa112_firmware:1.4.1:sr2::::::
	cpe:2.3:o:cisco:spa112_firmware:1.4.1:sr3::::::

cpe:2.3:h:cisco:spa112:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

OR	cpe:2.3:o:cisco:spa122_firmware::::::::
	cpe:2.3:o:cisco:spa122_firmware:1.4.1:-::::::
	cpe:2.3:o:cisco:spa122_firmware:1.4.1:sr1::::::
	cpe:2.3:o:cisco:spa122_firmware:1.4.1:sr2::::::
	cpe:2.3:o:cisco:spa122_firmware:1.4.1:sr3::::::

cpe:2.3:h:cisco:spa122:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-10-16 19:15

Updated : 2024-02-28 17:28

NVD link : CVE-2019-15257

Mitre link : CVE-2019-15257

CVE.ORG link : CVE-2019-15257

JSON object : View

Products Affected

cisco

spa122_firmware
spa112
spa112_firmware
spa122

CWE

NVD-CWE-Other CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2019-15257", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2019-10-16T19:15:13.537", "references": [{"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-spa-running-config", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "https://www.tenable.com/security/research/tra-2019-44", "tags": ["Third Party Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper restrictions on configuration information. An attacker could exploit this vulnerability by sending a request to an affected device through the web-based management interface. A successful exploit could allow the attacker to return running configuration information that could also include sensitive information."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web de los dispositivos Cisco SPA100 Series Analog Telephone Adapters (ATAs), podr\u00eda permitir a un atacante remoto autenticado acceder a informaci\u00f3n confidencial en un dispositivo afectado. La vulnerabilidad es debido a restricciones inapropiadas en la informaci\u00f3n de configuraci\u00f3n. Un atacante podr\u00eda explotar esta vulnerabilidad mediante el env\u00edo de una petici\u00f3n hacia un dispositivo afectado por medio de la interfaz de administraci\u00f3n basada en web. Una explotaci\u00f3n con \u00e9xito podr\u00eda permitir al atacante traer de vuelta informaci\u00f3n de configuraci\u00f3n de la ejecuci\u00f3n que tambi\u00e9n podr\u00eda incluir informaci\u00f3n confidencial."}], "lastModified": "2020-10-09T12:39:33.910", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa112_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDE978DB-5C48-4E25-A67E-497F033366E1", "versionEndExcluding": "1.4.1"}, {"criteria": "cpe:2.3:o:cisco:spa112_firmware:1.4.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDBCF90E-2E7B-4A58-B0DF-4A02D880EF0D"}, {"criteria": "cpe:2.3:o:cisco:spa112_firmware:1.4.1:sr1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "661CECD1-038C-41B1-AEB7-9C3E5087E088"}, {"criteria": "cpe:2.3:o:cisco:spa112_firmware:1.4.1:sr2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "691B5688-DDAF-49EE-8E9F-ABB06BB628B0"}, {"criteria": "cpe:2.3:o:cisco:spa112_firmware:1.4.1:sr3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4BAC9C2-3475-42EC-81FA-12BE338C936A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa112:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F61B8649-0781-4AF5-8CED-34616A9524FF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:spa122_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22E490C8-BA3D-44E0-A677-C3311489EED5", "versionEndExcluding": "1.4.1"}, {"criteria": "cpe:2.3:o:cisco:spa122_firmware:1.4.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30A5E568-2B2A-4A46-99E9-5FC203F96347"}, {"criteria": "cpe:2.3:o:cisco:spa122_firmware:1.4.1:sr1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A1FCBBE-9EE3-4D9D-AD25-2D4FA5893263"}, {"criteria": "cpe:2.3:o:cisco:spa122_firmware:1.4.1:sr2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D77D805-40B9-41F1-9A1A-C1A85E89361E"}, {"criteria": "cpe:2.3:o:cisco:spa122_firmware:1.4.1:sr3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B7D0675-063B-45A2-985D-B32FF3D6E15B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:spa122:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8C874C71-46D9-48A4-81C9-7ADDDB22FC8C"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com"}