Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the OTJ service, allowing a remote attacker to trigger a software abort via a crafted calendar invite, leading to a denial of service.
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://docs.pexip.com/admin/security_bulletins.htm |
|
History
Thu, 25 Dec 2025 05:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the OTJ service, allowing a remote attacker to trigger a software abort via a crafted calendar invite, leading to a denial of service. | |
| First Time appeared |
Pexip
Pexip infinity |
|
| Weaknesses | CWE-617 | |
| CPEs | cpe:2.3:a:pexip:infinity:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Pexip
Pexip infinity |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-12-25T04:52:41.031Z
Reserved: 2025-05-30T00:00:00.000Z
Link: CVE-2025-49088
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-12-25T05:16:07.420
Modified: 2025-12-25T05:16:07.420
Link: CVE-2025-49088
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses