13 matches found
CVE-2019-5280
The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered...
Security feature bypass
The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered...
CVE-2019-5280
The CVE-2019-5280 issue affects Huawei CloudLink Phone 7900 (V600R019C10) SIP TLS module. The root cause is insufficient verification of TLS server certificate parameters, enabling potential man-in-the-middle attacks that can cause abnormal phone registrations and affect IP phone availability. Pu...
CVE-2019-5280: Improper Certificate Validation
The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered...
Huawei CloudLink Phone 7900 SIP TLS Module TLS Certificate Validation Vulnerability
Huawei CloudLink Phone 7900 is an IP phone from Huawei, China.SIP TLS is one of the transport layer security modules. A security vulnerability exists in the SIP TLS module in the Huawei CloudLink Phone 7900 V600R019C10 version, which stems from the program not adequately validating the parameters...
PT-2019-4453
Name of the Vulnerable Software and Affected Versions Huawei CloudLink Phone 7900 version V600R019C10 Description The issue concerns a TLS certificate verification vulnerability in the SIP TLS module. Due to insufficient verification of specific parameters of the TLS server certificate, attackers...
Cisco Unified IP Phone 7900 Series WEB Interface Cross-Site Scripting Vulnerability
Cisco Unified IP Phone 7900 Series is a 7900 series IP phone product from Cisco USA. A cross-site scripting vulnerability exists in the web-based administration interface of the Cisco Unified IP Phone 7900 Series, which arises from the program's failure to adequately validate user-submitted input...
CVE-2018-15434
A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...
CVE-2018-15434: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...
PT-2018-2140
Name of the Vulnerable Software and Affected Versions Cisco Unified IP Phone 7900 Series affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...
PT-2012-5975
Name of the Vulnerable Software and Affected Versions Cisco Unified IP Phone 7900 series devices aka TNP phones versions prior to 9.3.1-ES10 Description The issue is related to the kernel in Cisco Native Unix CNU not properly validating system calls, which can be exploited by attackers to execute...
CVE-2012-5445: Improper Input Validation
The kernel in Cisco Native Unix CNU on Cisco Unified IP Phone 7900 series devices aka TNP phones with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service memory overwrite via a crafted binary...
