Verizon's IMS network for VoLTE deployments lacks IPsec-based integrity protection for SIP signaling, violating 3GPP TS 33.203 and GSMA IR.92 standards. SIP messages such as REGISTER, INVITE, and MESSAGE are transmitted in plaintext without cryptographic integrity or authenticity guarantees. The SIP signaling stack does not use SIP Security Agreement headers or ESP traffic, allowing on-path attackers to intercept, modify, replay, or inject SIP messages undetected, enabling call hijacking, SMS spoofing, denial-of-service, and emergency call manipulation.
| Vendor | Product | Versions |
|---|---|---|
| verizon communications | ims volte network | unspecified versions prior to planned future deployment |
