Android SIP account names information retrieval

Advisory IDRSN-SIP-1662 Vulnerability Information In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. Technical Informat...

Grandstream HT800 series Provisioning Command Injection

Advisory IDRSN-SIP-1661 Vulnerability Information Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands ...

Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability

Advisory IDRSN-SIP-1660 Vulnerability Information A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote at...

Asterisk – Remote crash in res_pjsip_diversion – 181 responses

Advisory IDRSN-SIP-1659 Vulnerability Information A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remote attacker to crash Asterisk by deliberately misusing SIP 18...

Asterisk – Remote crash in res_pjsip_diversion – History-Info header

Advisory IDRSN-SIP-1658 Vulnerability Information An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 17.x before 17.9.0, and 18.x before 18.1.0. Technical I...

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denial of Service Vulnerability

Advisory IDRSN-SIP-1656 Vulnerability Information A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, r...

Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability

Advisory IDRSN-SIP-1655 Vulnerability Information A vulnerability in the Session Initiation Protocol (SIP) library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload ...

Kamailio 5.4.0 Header Smuggling

Advisory IDRSN-SIP-1654 Vulnerability Information Kamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via white...

Asterisk – Remote crash in res_pjsip_session

Advisory IDRSN-SIP-1657 Vulnerability Information This is a crash within PJSIP whereby under heavy load the INVITE transaction on an INVITE session may not be set when sending a response, resulting in a crash. Technical Info...

NETGEAR Nighthawk R7000 1.0.9.64_10.2.64 NAT Slipstreaming

Advisory IDRSN-SIP-1657 Vulnerability Information NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall (remote arbitrary firewall...