CVE-2019-1764

A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. The vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on a targeted device via a web browser and with the privileges of the user. This vulnerability affects Cisco IP Phone 8800 Series products running a SIP Software release prior to 11.0(5) for Wireless IP Phone 8821 and 8821-EX; and 12.5(1)SR1 for the IP Conference Phone 8832 and the rest of the IP Phone 8800 Series. Cisco IP Conference Phone 8831 is not affected.

• CWE-352
• CWE-352

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190320-ip-phone-csrfVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190320-ip-phone-csrfVendor Advisory

Published

Mar 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17634Eclipse Memory Analyzer version 1.9.1 and earlier is subject…9
• CVE-2019-17635Eclipse Memory Analyzer version 1.9.1 and earlier is subject…7.8
• CVE-2019-17636In Eclipse Theia versions 0.3.9 through 0.15.0, one of the d…8.1
• CVE-2019-17637In all versions of Eclipse Web Tools Platform through releas…7.1
• CVE-2019-17638In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200…9.4
• CVE-2019-17639In Eclipse OpenJ9 prior to version 0.21 on Power platforms, …5.3
• CVE-2019-17640In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0…9.8
• CVE-2019-17642An issue was discovered in Centreon before 18.10.8, 19.10.1,…8.8
• CVE-2019-17643An issue was discovered in Centreon before 2.8-30,18.10-8, 1…7.5
• CVE-2019-17644An issue was discovered in Centreon before 2.8-30, 18.10-8, …7.5
• CVE-2019-17645An issue was discovered in Centreon before 2.8.31, 18.10.9, …7.5
• CVE-2019-17646An issue was discovered in Centreon before 18.10.8, 19.04.5,…7.5