CVE-2019-1635

🗓️ 03 May 2019 14:55:27Reported by ciscoType

A vulnerability in the call-handling functionality of Cisco IP Phone 7800 and 8800 Series could result in temporary DoS

Reporter	Title	Published	Views	Family All 9
Cisco	Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability	1 May 201916:00	–	cisco
Cvelist	CVE-2019-1635 Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability	3 May 201914:55	–	cvelist
EUVD	EUVD-2019-10192	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1635	3 May 201915:29	–	nvd
OSV	CVE-2019-1635	3 May 201915:29	–	osv
Prion	Race condition	3 May 201915:29	–	prion
Tenable Nessus	Cisco IP Phones 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service (CVE-2019-1635)	18 Mar 202400:00	–	nessus
ThreatPost	Cisco Warns of Critical Nexus 9000 Data Center Flaw	2 May 201915:24	–	threatpost
Vulnrichment	CVE-2019-1635 Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability	3 May 201914:55	–	vulnrichment

NVD

Node

cisco ip_conference_phone_7832_firmwareMatch9.3(4)sr3

cisco ip_conference_phone_7832_firmwareMatch10.3(1)sr4b

cisco ip_conference_phone_7832_firmwareMatch11.0(4)sr2

cisco ip_conference_phone_7832_firmwareMatch12.1(1)sr1

AND

cisco ip_conference_phone_7832Match-

Node

cisco ip_conference_phone_8832_firmwareMatch9.3(4)sr3

cisco ip_conference_phone_8832_firmwareMatch10.3(1)sr4b

cisco ip_conference_phone_8832_firmwareMatch11.0(4)sr2

cisco ip_conference_phone_8832_firmwareMatch12.1(1)sr1

AND

cisco ip_conference_phone_8832Match-

Node

cisco ip_phone_7811_firmwareMatch9.3(4)sr3

cisco ip_phone_7811_firmwareMatch10.3(1)sr4b

cisco ip_phone_7811_firmwareMatch11.0(4)sr2

cisco ip_phone_7811_firmwareMatch12.1(1)sr1

AND

cisco ip_phone_7811Match-

Node

cisco ip_phone_7821_firmwareMatch9.3(4)sr3

cisco ip_phone_7821_firmwareMatch10.3(1)sr4b

cisco ip_phone_7821_firmwareMatch11.0(4)sr2

cisco ip_phone_7821_firmwareMatch12.1(1)sr1

AND

cisco ip_phone_7821Match-

Node

cisco ip_phone_7841_firmwareMatch9.3(4)sr3

cisco ip_phone_7841_firmwareMatch10.3(1)sr4b

cisco ip_phone_7841_firmwareMatch11.0(4)sr2

cisco ip_phone_7841_firmwareMatch12.1(1)sr1

AND

cisco ip_phone_7841Match-

Node

cisco ip_phone_7861_firmwareMatch9.3(4)sr3

cisco ip_phone_7861_firmwareMatch10.3(1)sr4b

cisco ip_phone_7861_firmwareMatch11.0(4)sr2

cisco ip_phone_7861_firmwareMatch12.1(1)sr1

AND

cisco ip_phone_7861Match-

Node

cisco ip_phone_8811_firmwareMatch9.3(4)sr3

cisco ip_phone_8811_firmwareMatch10.3(1)sr4b

cisco ip_phone_8811_firmwareMatch11.0(4)sr2

cisco ip_phone_8811_firmwareMatch12.1(1)sr1

AND

cisco ip_phone_8811Match-

Node

cisco ip_phone_8841_firmwareMatch9.3(4)sr3

cisco ip_phone_8841_firmwareMatch10.3(1)sr4b

cisco ip_phone_8841_firmwareMatch11.0(4)sr2

cisco ip_phone_8841_firmwareMatch12.1(1)sr1

AND

cisco ip_phone_8841Match-

Node

cisco ip_phone_8845_firmwareMatch9.3(4)sr3

cisco ip_phone_8845_firmwareMatch10.3(1)sr4b

cisco ip_phone_8845_firmwareMatch11.0(4)sr2

cisco ip_phone_8845_firmwareMatch12.1(1)sr1

AND

cisco ip_phone_8845Match-

Node

cisco ip_phone_8851_firmwareMatch9.3(4)sr3

cisco ip_phone_8851_firmwareMatch10.3(1)sr4b

cisco ip_phone_8851_firmwareMatch11.0(4)sr2

cisco ip_phone_8851_firmwareMatch12.1(1)sr1

AND

cisco ip_phone_8851Match-

Node

cisco ip_phone_8861_firmwareMatch9.3(4)sr3

cisco ip_phone_8861_firmwareMatch10.3(1)sr4b

cisco ip_phone_8861_firmwareMatch11.0(4)sr2

cisco ip_phone_8861_firmwareMatch12.1(1)sr1

AND

cisco ip_phone_8861Match-

Node

cisco ip_phone_8865_firmwareMatch9.3(4)sr3

cisco ip_phone_8865_firmwareMatch10.3(1)sr4b

cisco ip_phone_8865_firmwareMatch11.0(4)sr2

cisco ip_phone_8865_firmwareMatch12.1(1)sr1

AND

cisco ip_phone_8865Match-

Node

cisco unified_ip_8831_conference_phone1_firmwareMatch9.3(4)sr3

cisco unified_ip_8831_conference_phone1_firmwareMatch10.3(1)sr4b

cisco unified_ip_8831_conference_phone1_firmwareMatch11.0(4)sr2

cisco unified_ip_8831_conference_phone1_firmwareMatch12.1(1)sr1

AND

cisco unified_ip_8831_conference_phone1Match-

Node

cisco unified_ip_8831_conference_phone_for_third-party_call_control2_firmwareMatch9.3(4)sr3

cisco unified_ip_8831_conference_phone_for_third-party_call_control2_firmwareMatch10.3(1)sr4b

cisco unified_ip_8831_conference_phone_for_third-party_call_control2_firmwareMatch11.0(4)sr2

cisco unified_ip_8831_conference_phone_for_third-party_call_control2_firmwareMatch12.1(1)sr1

AND

cisco unified_ip_8831_conference_phone_for_third-party_call_control2Match-

Node

cisco wireless_ip_phone_8821_firmwareMatch9.3(4)sr3

cisco wireless_ip_phone_8821_firmwareMatch10.3(1)sr4b

cisco wireless_ip_phone_8821_firmwareMatch11.0(4)sr2

cisco wireless_ip_phone_8821_firmwareMatch12.1(1)sr1

AND

cisco wireless_ip_phone_8821Match-

Node

cisco wireless_ip_phone_8821-ex_firmwareMatch9.3(4)sr3

cisco wireless_ip_phone_8821-ex_firmwareMatch10.3(1)sr4b

cisco wireless_ip_phone_8821-ex_firmwareMatch11.0(4)sr2

cisco wireless_ip_phone_8821-ex_firmwareMatch12.1(1)sr1

AND

cisco wireless_ip_phone_8821-exMatch-

[
  {
    "product": "Cisco Wireless IP Phone 8821 and 8821-EX",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "11.0(5)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cisco IP Phone 7800 Series and 8800 Series",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "12.5(1)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-phone-sip-xml-dos

21 Nov 2024 04:36Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

CVSS 27.8

CVSS 37.5

EPSS0.00977

SSVC