Lucene search
K

7 matches found

OSV
OSV
added 2019/08/13 9:15 p.m.1 views

CVE-2019-5280

The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered...

6.5CVSS6.6AI score
Exploits0References1
Prion
Prion
added 2019/08/13 9:15 p.m.13 views

Security feature bypass

The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered...

5.8CVSS6.3AI score0.0008EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/08/13 8:35 p.m.46 views

CVE-2019-5280

The CVE-2019-5280 issue affects Huawei CloudLink Phone 7900 (V600R019C10) SIP TLS module. The root cause is insufficient verification of TLS server certificate parameters, enabling potential man-in-the-middle attacks that can cause abnormal phone registrations and affect IP phone availability. Pu...

6.5CVSS6.3AI score0.0008EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2019/07/26 12:0 a.m.2 views

Huawei CloudLink Phone 7900 SIP TLS Module TLS Certificate Validation Vulnerability

Huawei CloudLink Phone 7900 is an IP phone from Huawei, China.SIP TLS is one of the transport layer security modules. A security vulnerability exists in the SIP TLS module in the Huawei CloudLink Phone 7900 V600R019C10 version, which stems from the program not adequately validating the parameters...

6.5CVSS6.6AI score0.0008EPSS
Exploits0References1
CNVD
CNVD
added 2018/10/09 12:0 a.m.1 views

Cisco Unified IP Phone 7900 Series WEB Interface Cross-Site Scripting Vulnerability

Cisco Unified IP Phone 7900 Series is a 7900 series IP phone product from Cisco USA. A cross-site scripting vulnerability exists in the web-based administration interface of the Cisco Unified IP Phone 7900 Series, which arises from the program's failure to adequately validate user-submitted input...

6.1CVSS6.2AI score0.00319EPSS
Exploits0References1
OSV
OSV
added 2018/10/05 2:29 p.m.0 views

CVE-2018-15434

A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

6.1CVSS6AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2011/06/02 8:55 p.m.1 views

CVE-2011-1602

The su utility on Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426...

6.6CVSS5.5AI score0.00062EPSS
Exploits0References7
Rows per page
Query Builder