CVE-2025-49088CWE-617

CVE-2025-49088

Medium · published December 25, 2025

CVSS v3.1
5.9
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the OTJ service, allowing a remote attacker to trigger a software abort via a crafted calendar invite, leading to a denial of service.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00315 · 23.2th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2025-12-25T10:16Z
Affected products (1)
ProductVersionsFixed in
pexip/pexip_infinity≥ 32.0, < 37.237.2
References (1)
https://docs.pexip.com/admin/security_bulletins.htm · [email protected]
EPSS history
Timeline
  • 25 DEC 00:00Z
    Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the…
    cvelistv5