The vulnerability lies in the implementation of the SIP protocol and the NAT function of the Application Layer Gateway (ALG) of the Cisco IOS XE operating system. This allows a attacker to trigger a reboot of the vulnerable device.

The vulnerability of the SIP protocol implementation and the NAT function of the Application Layer Gateway ALG on the Cisco IOS XE operating system is related to errors in processing SIP packets. Exploiting this vulnerability allows a malicious actor to trigger a restart of the vulnerable device ...

PT-2019-3390 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Session Initiation Protocol SIP inspection module...

Cisco IOS XE NAT SIP ALG Denial of Service Vulnerability

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG of Cisco IOS XE. The vulnerability...

CVE-2019-12654

A vulnerability in the common Session Initiation Protocol SIP library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to insufficient sanity checks ...

CVE-2019-12654 Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability

A vulnerability in the common Session Initiation Protocol SIP library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to insufficient sanity checks ...

CVE-2019-12654 Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability

A vulnerability in the common Session Initiation Protocol SIP library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to insufficient sanity checks ...

CVE-2019-12646

A vulnerability in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of transient SIP...

Design/Logic Flaw

A vulnerability in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of transient SIP...

PT-2019-3321 · Cisco · Cisco Ios +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS and IOS XE Software affected versions not specified Description: A vulnerability in the common Session Initiation Protocol SIP library could allow an unauthenticated, remote attacker to trigger a reload of an affected device,...

PT-2019-3316 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG could allow an unauthenticated, remote attacker to cause a...

The vulnerability of the microprogrammed software in Cisco IP Phone models series 8800 and 7800, related to insufficient checking of SIP initiation packets, allows attackers to cause service failures.

The vulnerability of the microprogrammed software in Cisco IP Phone models series 8800 and 7800 is related to insufficient checking of incoming packets of the Session Initiation Protocol SIP. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2019-1887

A vulnerability in the Session Initiation Protocol SIP protocol implementation of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient validation of input SIP traffic. An attacker...

CVE-2019-1922

A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected phone. The vulnerability is due to insufficient validation of input Session Initiation Protocol S...

Input validation

A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected phone. The vulnerability is due to insufficient validation of input Session Initiation Protocol S...

Cisco Unified Communications Manager Buffer Overflow Vulnerability (CNVD-2019-21308)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A buffer error vulnerability...

The vulnerability of the call processing function in Cisco IP Phone models 7800 and 8800 allows a intruder to cause a service failure.

The vulnerability of the call processing function in Cisco IP Phone models 7800 and 8800 is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted SIP packet to the vulnerable phone...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server and the Cisco Expressway software lies in the lack of proper input data validation. This allows a perpetrator to trigger a service failure.

The vulnerability of the Microprogramming Software of the Cisco TelePresence Video Communication Server and the Cisco Expressway software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending SIP message...

CVE-2019-1721

A vulnerability in the phone book feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service DoS condition on an affected system. The...

The vulnerability of the Session Initiation Protocol implementation in the microcomputer-based software of Cisco Small Business SPA514G devices allows a attacker to induce a service failure.

The vulnerability of the Session Initiation Protocol SIP implementation in Cisco Small Business SPA514G IP-telephone software is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted SIP messages...

CVE-2019-1765

A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an authenticated, remote attacker to write arbitrary files to the filesystem. The vulnerability is due to insufficient input validation and file-level...