VDB-107132 · CVE-2017-14001 · BID 100950

Digium Asterisk GUI up to 2.1.0 os command injection

A vulnerability was found in Digium Asterisk GUI up to 2.1.0 (Communications System) and classified as critical. Affected by this issue is an unknown code. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10820016	01/14/2021	VulD...	cvss2_nvd_basescore	9.0	nist.gov	01/14/2021	accepted	90
10820015	01/14/2021	VulD...	person_name	Davy Douhine	securityfocus.com	01/14/2021	accepted	70
7139421	11/19/2019	VulD...	securityfocus_class	Input Validation Error	securityfocus.com	11/19/2019	accepted	100
7139420	11/19/2019	VulD...	securityfocus_date	1505952000 (09/21/2017)	securityfocus.com	11/19/2019	accepted	100
7139375	11/19/2019	VulD...	discoverydate	1505952000		11/19/2019	accepted	100
7139431	09/26/2017	VulD...	cvss3_nvd_basescore	8.8	nist.gov	09/26/2017	accepted	90
7139430	09/26/2017	VulD...	0day_days	4		09/26/2017	accepted	90
7139429	09/26/2017	VulD...	cvss3_vuldb_rc	X		09/26/2017	accepted	90
7139428	09/26/2017	VulD...	cvss3_vuldb_rl	X		09/26/2017	accepted	90
7139427	09/26/2017	VulD...	cvss3_vuldb_e	X		09/26/2017	accepted	90
7139426	09/26/2017	VulD...	cvss2_vuldb_rc	ND		09/26/2017	accepted	90
7139425	09/26/2017	VulD...	cvss2_vuldb_rl	ND		09/26/2017	accepted	90
7139424	09/26/2017	VulD...	cvss2_vuldb_e	ND		09/26/2017	accepted	90
7139423	09/26/2017	VulD...	location	Website		09/26/2017	accepted	90
7139422	09/26/2017	VulD...	securityfocus_title	Digium Asterisk GUI CVE-2017-14001 OS Command Injection Vulnerability	securityfocus.com	09/26/2017	accepted	100
7139419	09/26/2017	VulD...	securityfocus	100950	securityfocus.com	09/26/2017	accepted	100
7139418	09/26/2017	VulD...	cve_nvd_summary	An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior. An OS command injection vulnerability has been identified that may allow the execution of arbitrary code on the system through the inclusion of OS commands in the URL request of the program.	mitre.org	09/26/2017	accepted	100
7139417	09/26/2017	VulD...	cve_nvd_published	1506297600	mitre.org	09/26/2017	accepted	100
7139416	09/26/2017	VulD...	cve_assigned	1504051200	mitre.org	09/26/2017	accepted	100
7139415	09/26/2017	VulD...	cve	CVE-2017-14001	mitre.org	09/26/2017	accepted	100