Origin-Validation Error in Sipwise RTP Engine Allows Media Stream Interception

CVE-2025-53399

What is CVE-2025-53399?

In Sipwise RTP Engine prior to version 13.4.1.1, a flaw exists in the endpoint-learning logic that allows attackers to exploit origin-validation weaknesses, enabling them to inject or intercept RTP/SRTP media streams. This vulnerability can have severe consequences unless the relay is configured with strict settings and learning is disabled. The released version 13.4.1.1 addresses this issue by limiting exposure to the first five packets and implementing a recrypt flag, effectively preventing SRTP attacks when both of these measures are applied.

References