Lucene search
+L

351 matches found

Vulnrichment
Vulnrichment
added 2019/03/13 9:0 p.m.9 views

CVE-2018-0389 Cisco Small Business SPA514G IP Phones SIP Denial of Service Vulnerability

A vulnerability in the implementation of Session Initiation Protocol SIP processing in Cisco Small Business SPA514G IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS condition. The vulnerability is du...

7.5CVSS7.2AI score0.02516EPSS
SaveExploits0References2
CVE
CVE
added 2019/03/13 9:0 p.m.59 views

CVE-2018-0389

The CVE-2018-0389 issue affects Cisco Small Business SPA514G IP Phones running firmware 7.6.2SR2 or earlier. It stems from improper SIP processing, allowing an unauthenticated remote attacker to force the device to become unresponsive, causing a DoS that persists until manual restart. Cisco’s adv...

7.8CVSS7.5AI score0.02516EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/03/13 9:0 p.m.27 views

CVE-2018-0389 Cisco Small Business SPA514G IP Phones SIP Denial of Service Vulnerability

A vulnerability in the implementation of Session Initiation Protocol SIP processing in Cisco Small Business SPA514G IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS condition. The vulnerability is du...

7.5CVSS7.5AI score0.02516EPSS
SaveExploits0References2
Cisco
Cisco
added 2019/03/13 4:0 p.m.72 views

Cisco Small Business SPA514G IP Phones SIP Denial of Service Vulnerability

A vulnerability in the implementation of Session Initiation Protocol SIP processing in Cisco Small Business SPA514G IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS condition. The vulnerability is du...

7.5CVSS2.5AI score0.02516EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:0 a.m.7 views

The vulnerability of the implementations of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) in Cisco IP telephones allows a perpetrator to trigger a device reboot and a service failure.

The vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implementations in IP-telephone microprogramming systems arises from the lack of checks for the length of certain fields in protocol packets. Exploiting this vulnerability can allow an attacker to trigger a...

6.5CVSS6.6AI score0.0064EPSS
SaveExploits0References2
NVD
NVD
added 2019/02/25 5:29 p.m.23 views

CVE-2019-1683

A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker to listen to or control some aspects of a Transport Level Security TLS-encrypted Session Initiation Protocol SIP conversation. The...

7.4CVSS6.8AI score0.00874EPSS
SaveExploits0References2
Prion
Prion
added 2019/02/25 5:29 p.m.26 views

Input validation

A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker to listen to or control some aspects of a Transport Level Security TLS-encrypted Session Initiation Protocol SIP conversation. The...

5.8CVSS7.4AI score0.00874EPSS
SaveExploits0References2Affected Software14
Cvelist
Cvelist
added 2019/02/25 5:0 p.m.23 views

CVE-2019-1683 Cisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation Vulnerability

A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker to listen to or control some aspects of a Transport Level Security TLS-encrypted Session Initiation Protocol SIP conversation. The...

6.5CVSS7.5AI score0.00874EPSS
SaveExploits0References2
CVE
CVE
added 2019/02/25 5:0 p.m.53 views

CVE-2019-1683

CVE-2019-1683 affects Cisco Small Business SPA112, SPA500, SPA525, and SPA5X5 IP Phones. The issue is in the certificate handling component where server certificates are not properly validated, allowing an unauthenticated, remote attacker to listen to or control parts of a TLS-encrypted SIP conve...

7.4CVSS6.8AI score0.00874EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2019/02/25 5:0 p.m.10 views

CVE-2019-1683 Cisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation Vulnerability

A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker to listen to or control some aspects of a Transport Level Security TLS-encrypted Session Initiation Protocol SIP conversation. The...

6.5CVSS7AI score0.00874EPSS
SaveExploits0References2
Cisco
Cisco
added 2019/02/20 4:0 p.m.101 views

Cisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation Vulnerability

A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker to listen to or control some aspects of a Transport Level Security TLS-encrypted Session Initiation Protocol SIP conversation. The...

6.5CVSS1.1AI score0.00874EPSS
SaveExploits0References1
exploitpack
exploitpack
added 2019/01/14 12:0 a.m.50 views

AudioCode 400HD - Command Injection

AudioCode 400HD - Command Injection CVE-2018-10093 Remote command injection vulnerability in AudioCode IP phones Description The AudioCodes 400HD series of IP phones consists in a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony...

9CVSS0.2AI score0.6819EPSS
SaveExploits5
0day.today
0day.today
added 2019/01/12 12:0 a.m.52 views

AudioCode 400HD Remote Command Injection Vulnerability

Exploit for cgi platform in category web applications CVE-2018-10093 Remote command injection vulnerability in AudioCode IP phones Description The AudioCodes 400HD series of IP phones consists in a range of easy-to-use, feature-rich desktop devices for the service provider hosted services,...

8.7AI score0.6819EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2019/01/12 12:0 a.m.167 views

AudioCode 400HD Remote Command Injection

CVE-2018-10093 Remote command injection vulnerability in AudioCode IP phones Description The AudioCodes 400HD series of IP phones consists in a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony and contact center markets. The CGI...

0.2AI score0.6819EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2019/01/12 12:0 a.m.194 views

AudioCode 400HD Cross Site scripting

CVE-2018-10091 Stored XSS vulnerabilities in AudioCode IP phones Description The AudioCodes 400HD series of IP phones is a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony and contact center markets. Most of user inputs in the CG...

5.2AI score0.00773EPSS
SaveExploits3
0day.today
0day.today
added 2019/01/12 12:0 a.m.77 views

AudioCode 400HD Cross Site scripting Vulnerability

Exploit for cgi platform in category web applications CVE-2018-10091 Stored XSS vulnerabilities in AudioCode IP phones Description The AudioCodes 400HD series of IP phones is a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony and...

0.1AI score0.00773EPSS
SaveExploits3
OSV
OSV
added 2018/06/07 12:29 p.m.6 views

CVE-2018-0316

A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Firmware could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of...

7.5CVSS5.8AI score0.0254EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/06/07 12:0 p.m.22 views

CVE-2018-0316

A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Firmware could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of...

7.5AI score0.0254EPSS
SaveExploits0References2
Prion
Prion
added 2018/05/17 3:29 a.m.13 views

Input validation

A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected phone. The vulnerability is due t...

5CVSS7.5AI score0.03337EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2018/04/24 3:0 p.m.30 views

CVE-2017-17255

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

7.5AI score0.01242EPSS
SaveExploits0References1
Rows per page
Query Builder