CVE-2019-5280

The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability

published August 13, 2019

CVSS
—
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered abnormally, affecting the availability of IP phones.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.2th percentile
Published
2019-08-13T20:35Z
EPSS history
Timeline
  • 13 AUG 20:35Z
    The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability
    cvelistv5