Back to Database
Status published
High
CVE-2019-12325
The Htek UC902 VoIP phone web management interface contains several...
Vulnerability Description
The Htek UC902 VoIP phone web management interface contains several buffer overflow vulnerabilities in the firmware version 2.0.4.4.46, which allow an attacker to crash the device (DoS) without authentication or execute code (authenticated as a user) to spawn a remote shell as a root user.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12325
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
htek
View all reports →Affected Software
uc902 firmware
Vulnerable Versions:
2.0.4.4.46
Timeline
Official Publish:
July 22nd, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AC:L/AV:A/A:H/C:L/I:L/PR:L/S:C/UI:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.