CVE-2019-5280
CVE-2019-5280
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
13 Aug 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered abnormally, affecting the availability of IP phones.
Affected products
Huawei · CloudLink Phone 7900Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →