CVE-2019-1845

A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePresence Video Communication Server (VCS), and Cisco Expressway Series could allow an unauthenticated, remote attacker to cause a service outage for users attempting to authenticate, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient controls for specific memory operations. An attacker could exploit this vulnerability by sending a malformed Extensible Messaging and Presence Protocol (XMPP) authentication request to an affected system. A successful exploit could allow the attacker to cause an unexpected restart of the authentication service, preventing users from successfully authenticating. Exploitation of this vulnerability does not impact users who were authenticated prior to an attack.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/108615Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-cucm-imp-dosVendor Advisory
• http://www.securityfocus.com/bid/108615Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-cucm-imp-dosVendor Advisory

Published

Jun 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1843A vulnerability in the web-based management interface of the…8.6
• CVE-2019-1844A vulnerability in certain attachment detection mechanisms o…5.3
• CVE-2019-18446An issue was discovered in GitLab Community and Enterprise E…4.3
• CVE-2019-18447An issue was discovered in GitLab Community and Enterprise E…4.3
• CVE-2019-18448An issue was discovered in GitLab Community and Enterprise E…6.5
• CVE-2019-18449An issue was discovered in GitLab Community and Enterprise E…4.3
• CVE-2019-18450An issue was discovered in GitLab Community and Enterprise E…4.3
• CVE-2019-18451An issue was discovered in GitLab Community and Enterprise E…6.1
• CVE-2019-18452An issue was discovered in GitLab Community and Enterprise E…5.3
• CVE-2019-18453An issue was discovered in GitLab Community and Enterprise E…4.3
• CVE-2019-18454An issue was discovered in GitLab Community and Enterprise E…6.1
• CVE-2019-18455An issue was discovered in GitLab Community and Enterprise E…7.5