CVE-2003-1112: The Session Initiation Protocol (SIP) implementation in Ingate Firewall and Ingate SIParator before 3.1.3 a...

Security readout for executives and security teams

This flaw affects older Ingate Firewall and Ingate SIParator SIP handling. A remote attacker could send malformed SIP INVITE traffic that crashes the service and may allow code execution. The public bundle does not prove active exploitation. Known exposure is limited to Ingate Firewall or Ingate SIParator deployments before 3.1.3, especially where SIP is reachable from untrusted networks. The supplied affected-product metadata is incomplete, so confirm through asset inventory and vendor records. Prioritize remediation where affected Ingate systems protect voice or SIP-dependent business services. The main confirmed business risk is outage; possible code execution raises concern, but public evidence in this bundle is limited. Mitigation focus: Upgrade Ingate Firewall and Ingate SIParator to version 3.1.3 or later where applicable.; Limit SIP access to trusted networks and peers until version status is confirmed.; Review Ingate or vendor guidance for product-specific workarounds or hardening..

Prepared

Jun 29, 2026, 23:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.