CVE-2023-20218

A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to to modify a web page in the context of a user's browser. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious websites, or the attacker could use this vulnerability to conduct further client-side attacks. Cisco will not release software updates that address this vulnerability. {{value}} ["%7b%7bvalue%7d%7d"])}]]

• CWE-80
• CWE-79

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-web-multi-7kvPmu2FVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-web-multi-7kvPmu2FVendor Advisory

Published

Aug 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20212A vulnerability in the AutoIt module of ClamAV could allow a…7.5
• CVE-2023-20213A vulnerability in the CDP processing feature of Cisco ISE c…4.3
• CVE-2023-20214A vulnerability in the request authentication validation for…9.1
• CVE-2023-20215A vulnerability in the scanning engines of Cisco AsyncOS Sof…5.3
• CVE-2023-20216A vulnerability in the privilege management functionality of…7.8
• CVE-2023-20217A vulnerability in the CLI of Cisco ThousandEyes Enterprise …5.5
• CVE-2023-20219Multiple vulnerabilities in the web management interface of …8.8
• CVE-2023-2022An issue has been discovered in GitLab CE/EE affecting all v…4.3
• CVE-2023-20220Multiple vulnerabilities in the web-based management interfa…8.8
• CVE-2023-20221A vulnerability in the web-based management interface of Cis…6.5
• CVE-2023-20222A vulnerability in the web-based management interface of Cis…6.1
• CVE-2023-20223A vulnerability in Cisco DNA Center could allow an unauthent…8.2