CVE-2019-1635

CWE-399CWE-755 — Improper Exception Handling4 documents4 sources
Severity
7.5HIGH
EPSS
1.0%
top 23.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
18
Cisco Cisco IP Phone 7800 Series AND 8800 SeriesCisco Cisco Wireless IP Phone 8821 AND 8821-exCisco IP Conference Phone 7832 Firmware+15 more
Timeline
PublishedMay 3
Latest updateMay 24

Description

A vulnerability in the call-handling functionality of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service (DoS) condition. The vulnerability is due to incomplete error handling when XML data within a SIP packet is parsed. An attacker could exploit this vulnerability by sending a SIP packet that contains a malicious XML…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages18 packages

▶CVEListV5cisco/cisco_ip_phone_7800_series_and_8800_seriesunspecified — 12.5(1)
▶CVEListV5cisco/cisco_wireless_ip_phone_8821_and_8821-exunspecified — 11.0(5)

🔴Vulnerability Details

2
GHSA
GHSA-mc83-gm47-m9vc: A vulnerability in the call-handling functionality of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and 8800 Series could↗2022-05-24
▶
CVEList
Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability↗2019-05-03
▶

📋Vendor Advisories

1
Cisco
Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability↗2019-05-01
▶