CVE-2019-5280

2019-08-1320:35:24

huawei

www.cve.org

0.001 Low

EPSS

Percentile

34.7%

JSON

The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered abnormally, affecting the availability of IP phones.

CNA Affected

[
  {
    "product": "CloudLink Phone 7900",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "V600R019C10"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20190724-01-7900-en

0.001 Low

EPSS

Percentile

34.7%

JSON

Related for CVELIST:CVE-2019-5280