CVE-2019-12703 is a cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco SPA122 ATA with Router Devices, stemming from insufficient input validation. An unauthenticated, adjacent attacker could exploit this by sending crafted DHCP requests and then tricking a user into clicking a malicious link. This medium-severity vulnerability (CVSS 5.2) could allow arbitrary script execution in the user's browser or access to sensitive information. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.4.1CPE matchmatch criteria | cpe:2.3:o:cisco:spa122_firmware:*:*:*:*:*:*:*:* | ||
1.4.1CPE matchmatch criteria | cpe:2.3:o:cisco:spa122_firmware:1.4.1:-:*:*:*:*:*:* | ||
1.4.1CPE matchmatch criteria | cpe:2.3:o:cisco:spa122_firmware:1.4.1:sr1:*:*:*:*:*:* | ||
1.4.1CPE matchmatch criteria | cpe:2.3:o:cisco:spa122_firmware:1.4.1:sr2:*:*:*:*:*:* | ||
1.4.1CPE matchmatch criteria | cpe:2.3:o:cisco:spa122_firmware:1.4.1:sr3:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Cisco SPA100 Series Multiple Vulnerabilities
Oct 15, 2019Cisco SPA100 Series Multiple Vulnerabilities
Oct 15, 2019Cisco SPA100 Series Multiple Vulnerabilities
Oct 15, 2019Cisco SPA100 Series Multiple Vulnerabilities
Oct 15, 2019Cisco SPA100 Series Multiple Vulnerabilities
Oct 15, 2019Cisco SPA100 Series Multiple Vulnerabilities
Oct 15, 2019