CVE:CVE-2019-1683
CNNVD:CNNVD-201902-801
Cisco SPA112 Series等都是美国思科（Cisco）公司的产品。Cisco SPA112 Series是一款SPA112系列IP电话。SPA525 Series是一款SPA525系列IP电话。SPA5X5 Series是一款SPA5X5系列IP电话。
Cisco SPA112、SPA525和SPA5X5 Series中的证书处理组件存在信任管理问题漏洞，该漏洞源于程序没有正确验证服务器证书。远程攻击者可通过构建恶意的服务器证书利用该漏洞监听或控制部分被安全传输层协议（TLS）加密的会话初始协议（SIP）通话。
solution:Upgrade cisco spa112_firmware to a higher version than 1.4.2,and avoid the version 1.4.2; Upgrade cisco spa525_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa5x5_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa500_firmware to a higher version than 1.4.2,and avoid the version 1.4.2; Upgrade cisco spa500s_firmware to a higher version than 1.4.2,and avoid the version 1.4.2; Upgrade cisco spa500ds_firmware to a higher version than 1.4.2,and avoid the version 1.4.2; Upgrade cisco spa501g_firmware to a higher version than 1.4.2,and avoid the version 1.4.2; Upgrade cisco spa502g_firmware to a higher version than 1.4.2,and avoid the version 1.4.2; Upgrade cisco spa504g_firmware to a higher version than 1.4.2,and avoid the version 1.4.2; Upgrade cisco spa508g_firmware to a higher version than 1.4.2,and avoid the version 1.4.2; Upgrade cisco spa509g_firmware to a higher version than 1.4.2,and avoid the version 1.4.2; Upgrade cisco spa512g_firmware to a higher version than 1.4.2,and avoid the version 1.4.2; Upgrade cisco spa514g_firmware to a higher version than 1.4.2,and avoid the version 1.4.2; Upgrade cisco spa525g_firmware to a higher version than 1.4.2,and avoid the version 1.4.2