Read the docs
TI-2025-33350 Aliases CVE-2025-53399GHSA-9m93-62q8-9jmx

Origin validation error in Sipwise rtpengine

Priority MEDIUM 64CWE-346Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
None · None · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-346.

Summary

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets (except when the relay is configured for strict source and learning disabled). Version 13.4.1.1 fixes the heuristic mode by limiting exposure to the first five packets, and introduces a recrypt flag that fully prevents SRTP attacks when both mitigations are enabled.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0717 94th percentileScored 2026-11-07
Fix Fixed rtpengine (Sipwise): 13.4.1.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Sipwisertpenginebefore 13.4.1.113.4.1.1Patch availableCNA
  • rtpengine VendorSipwise Affected before 13.4.1.1 Fixed in 13.4.1.1 Patch available CNA

Remediation

  • Fix · CNA rtpengine (Sipwise) Fixed in 13.4.1.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-53399
  2. 2026-10-03 Alias added: GHSA-9m93-62q8-9jmx

References

Other 4

  • TI-2024-18844 An Open Redirect vulnerability was found in Sipwise C5 NGCP Dashboard below mr11.5.1. CVSS 3.1LOW 3.1
  • TI-2021-11692 Sipwise C5 NGCP www_csc version 3.6.4 up to and including platform NGCP CE mr3.8.13… CVSS 3.1HIGH 8.8
  • TI-2021-11691 Sipwise C5 NGCP WWW Admin version 3.6.7 up to and including platform version NGCP CE 3.0… CVSS 3.1MEDIUM 5.4
  • TI-2024-18845 An issue discovered in Sipwise C5 NGCP Dashboard below mr11.5.1 allows a low privileged… CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences