CVE:CVE-2023-20218
CNNVD:CNNVD-202307-1768
Cisco Small Business SPA500 Series IP Phones是美国思科（Cisco）公司的一款SPA500系列IP电话。
Cisco Small Business SPA500 Series IP Phones 存在跨站脚本漏洞，该漏洞源于 Web 的管理界面中存在多个漏洞，可能允许未经身份验证的远程攻击者进行 HTML 注入攻击。
solution:Upgrade cisco spa500ds_firmware to a higher version than -; Upgrade cisco spa500s_firmware to a higher version than -; Upgrade cisco spa501g_firmware to a higher version than -; Upgrade cisco spa502g_firmware to a higher version than -; Upgrade cisco spa504g_firmware to a higher version than -; Upgrade cisco spa508g_firmware to a higher version than -; Upgrade cisco spa509g_firmware to a higher version than -; Upgrade cisco spa512g_firmware to a higher version than -; Upgrade cisco spa514g_firmware to a higher version than -; Upgrade cisco spa525_firmware to a higher version than -; Upgrade cisco spa525g_firmware to a higher version than -; Upgrade cisco spa525g2_firmware to a higher version than -