PT-2019-2653 · Cisco · Cisco Ip Phone

Publicado 2019-07-03 · Atualizado 2019-10-09 · CVE-2019-1922

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series (affected versions not specified)

Description The issue is related to insufficient validation of input Session Initiation Protocol (SIP) packets, which could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. An attacker could exploit this by altering the SIP replies sent to the phone during the registration process, potentially causing the phone to reboot and not complete the registration process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2019-02539

CVE-2019-1922

Produtos afetados

Cisco Ip Phone

Referências · 6

• https://bdu.fstec.ru/vul/2019-02539 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1922 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-ip-phone-sip-dos · Aviso do Fabricante
• https://tools.cisco.com/security/center/publicationListing.x · Nota
• https://t.me/cvenotify/278 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-1922 · Nota de Segurança