David Gullasch

A logic issue was addressed with improved restrictions, allowing an attacker in a privileged network position to potentially bypass HSTS. This could impact the integrity of data.

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. The vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on a targeted device via a web browser and with the privileges of the user.

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software could allow an unauthenticated, remote attacker to bypass authorization, access critical services, and cause a denial of service (DoS) condition. The issue exists because the software fails to sanitize URLs before handling requests. An attacker could exploit this by submitting a crafted URL, potentially gaining unauthorized access to critical services and causing a DoS condition.

A vulnerability in the web-based management interface of the Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The issue exists due to the software not restricting the maximum size of certain files that can be written to disk. An attacker with valid administrator credentials could exploit this by sending a crafted, remote connection request to an affected system, allowing them to write a file that consumes most of the available disk space, causing application functions to operate abnormally and leading to a DoS condition.

The issue concerns the Storage and Access service, which fails to enforce password requirements for SMB filesystem access. This allows attackers to read arbitrary files under certain conditions, specifically via sessions over Wi-Fi networks or USB connections when the device is in Development Mode.