CVE-2019-1683

CVE-2019-1683 is a high-severity vulnerability affecting Cisco SPA112, SPA525, and SPA5X5 Series IP Phones due to improper validation of server certificates. An unauthenticated, remote attacker can exploit this by presenting a malicious certificate, allowing them to eavesdrop on or control TLS-encrypted SIP conversations. The vulnerability has a CVSS score of 7.4 (High) with a network attack vector and high impact on confidentiality and integrity, but requires high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.