CVE-2019-1887

A vulnerability in the Session Initiation Protocol (SIP) protocol implementation of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of input SIP traffic. An attacker could exploit this vulnerability by sending a malformed SIP packet to an affected Cisco Unified Communications Manager. A successful exploit could allow the attacker to trigger a new registration process on all connected phones, temporarily disrupting service.

• CWE-787
• CWE-787

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-cucm-dosPatch, Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-cucm-dosPatch, Vendor Advisory

Published

Jul 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18864/server-info and /server-status in Blaauw Remote Kiln Contro…7.5
• CVE-2019-18865Information disclosure via error message discrepancies in au…5.3
• CVE-2019-18866Unauthenticated SQL injection via the username in the login …7.5
• CVE-2019-18867Browsable directories in Blaauw Remote Kiln Control through …7.5
• CVE-2019-18868Blaauw Remote Kiln Control through v3.00r4 allows an unauthe…9.8
• CVE-2019-18869Leftover Debug Code in Blaauw Remote Kiln Control through v3…9.8
• CVE-2019-18870A path traversal via the iniFile parameter in excel.php in B…6.5
• CVE-2019-18871A path traversal in debug.php accessed via default.php in Bl…8.8
• CVE-2019-18872Weak password requirements in Blaauw Remote Kiln Control thr…7.5
• CVE-2019-18873FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agen…9
• CVE-2019-18874psutil (aka python-psutil) through 5.6.5 can have a double f…7.5
• CVE-2019-1888A vulnerability in the Administration Web Interface of Cisco…7.2