Riskcovery

CVE-2019-5280

State
Published
Severity
Not scored
Published
Aug 13, 2019
Updated
Aug 4, 2024
Reserved
Jan 4, 2019

Read the record on cve.org

Description

The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered abnormally, affecting the availability of IP phones.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
CloudLink Phone 7900Huawei
  • V600R019C10Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.