681 matches found
CVE-2018-19978
A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker authenticated as simple user in the same network as the device to trigger remote code execution via a POST request ManufacturerName parameter...
CVE-2018-16217
The network diagnostic function ping in the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware 66.83.0.35 allows a remote authenticated attacker to trigger OS commands or open a reverse shell via command injection...
CVE-2018-16221
The CVE-2018-16221 affects the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35). The diagnostics web interface does not validate/escape path information, enabling path traversal via the file parameter of a POST request. This authenticated attacker can access privileged files (e.g., ...
CVE-2018-16218
A CSRF Cross Site Request Forgery in the web interface of the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware version 66.83.0.35 allows a remote attacker to trigger code execution or settings modification on the device by providing a crafted link to the victim...
CVE-2018-16217
The CVE-2018-16217 issue affects the YaHoo? Actually Yeahlink Ultra-elegant IP Phone SIP-T41P, firmware 66.83.0.35. The vulnerability is in the network diagnostic function (ping). A remote authenticated attacker can trigger OS commands or open a reverse shell via command injection. Root cause is ...
CVE-2018-16217
The network diagnostic function ping in the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware 66.83.0.35 allows a remote authenticated attacker to trigger OS commands or open a reverse shell via command injection...
The vulnerability of the call processing function in Cisco IP Phone models 7800 and 8800 allows a intruder to cause a service failure.
The vulnerability of the call processing function in Cisco IP Phone models 7800 and 8800 is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted SIP packet to the vulnerable phone...
Race condition
A vulnerability in the call-handling functionality of Session Initiation Protocol SIP Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS condition...
CVE-2019-1635
A vulnerability in the call-handling functionality of Session Initiation Protocol SIP Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS condition...
CVE-2019-1635
A vulnerability in the call-handling functionality of Session Initiation Protocol SIP Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS condition...
CVE-2019-1635
CVE-2019-1635 affects Cisco IP Phone 7800 and 8800 Series SIP software. The issue is due to incomplete error handling when parsing XML data in SIP packets, allowing an unauthenticated, remote attacker to cause the phone to reload and experience a temporary DoS. The vulnerability applies to the ca...
CVE-2019-1635 Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability
A vulnerability in the call-handling functionality of Session Initiation Protocol SIP Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS condition...
CVE-2019-1635 Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability
A vulnerability in the call-handling functionality of Session Initiation Protocol SIP Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS condition...
Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability
A vulnerability in the call-handling functionality of Session Initiation Protocol SIP Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS condition...
The vulnerability of the web interface of the microprogramming software for Cisco IP Phones series 8800 allows a perpetrator to cause a service failure or execute arbitrary code.
The vulnerability of the web interface of Cisco IP phones—IP Phone 8800, IP Phone 7800, IP Phone 8821, IP Phone 8821-EX, and IP Conference Phone 8831—is related to deficiencies in the validation of user input data during authentication. Exploiting this vulnerability could allow a malicious actor ...
Grandstream IP Multimedia Phone Version GXV3240 Firmware Detection (SIP)
Binary data 700493.prm...
Command injection
An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functionality, which uses a parameter in a request to command.cgi from the Monitoring page in the web UI, unsafely puts user-alterable data directly into an OS command, leading to...
CVE-2018-5757
An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functionality, which uses a parameter in a request to command.cgi from the Monitoring page in the web UI, unsafely puts user-alterable data directly into an OS command, leading to...
CVE-2018-5757
An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functionality, which uses a parameter in a request to command.cgi from the Monitoring page in the web UI, unsafely puts user-alterable data directly into an OS command, leading to...
CVE-2018-5757
An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functionality, which uses a parameter in a request to command.cgi from the Monitoring page in the web UI, unsafely puts user-alterable data directly into an OS command, leading to...