What’s Vulnerable › Vulnerabilities

CVE-2019-5280

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-08-13 · updated 2026-06-17
• Weakness: CWE-295

Description

The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered abnormally, affecting the availability of IP phones.

Affected products

• Huawei CloudLink Phone 7900: v600r019c10

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190724-01-7900-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190724-01-7900-en

Get alerted when CVE-2019-5280 or the next vulnerability affects your stack