Digium Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Communications System	144
Not Defined	4

Product

Digium Asterisk	140
Digium Asterisk Open Source	2
Digium Zaptel	2
Digium Asterisk GUI	2
Digium s800i	2

Remediation

Official Fix	136
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	12

Exploitability

High	2
Functional	0
Proof-of-Concept	52
Unproven	22
Not Defined	72

Access Vector

Not Defined	0
Physical	0
Local	4
Adjacent	2
Network	142

Authentication

Not Defined	0
High	0
Low	38
None	110

User Interaction

Not Defined	0
Required	0
None	148

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	12
≤6	62
≤7	18
≤8	42
≤9	12
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	42
≤6	36
≤7	36
≤8	18
≤9	12
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	4
≤5	8
≤6	66
≤7	20
≤8	38
≤9	10
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	6
≤7	0
≤8	6
≤9	6
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	50
<2k	20
<5k	68
<10k	2
<25k	4
<50k	4
<100k	0
≥100k	0

Exploit Today

<1k	148
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (7): Addons Module (1), Asterisk (141), Asterisk GUI (1), Asterisk Open Source (1), Certified Asterisk (1), Zaptel (1), s800i (2)

Link to Vendor Website: https://www.digium.com/

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	CTI	EPSS	CVE
04/15/2022	5.5	5.3	Digium Asterisk STIR server-side request forgery	Communications System	Not Defined	Official Fix	0.03	0.00555	CVE-2022-26499
04/15/2022	6.3	6.0	Digium Asterisk/Certified Asterisk func_odbc sql injection	Communications System	Not Defined	Official Fix	0.03	0.00473	CVE-2022-26651
04/15/2022	4.3	4.1	Digium Asterisk STIR resource consumption	Communications System	Not Defined	Official Fix	0.04	0.01775	CVE-2022-26498
02/21/2021	4.3	4.3	Digium Asterisk WebRTC Client res_rtp_asterisk.c stack-based overflow	Communications System	Not Defined	Official Fix	0.00	0.00238	CVE-2021-26714
02/19/2021	5.1	5.1	Digium Asterisk SDP Negotiation res_pjsip_session.c denial of service	Communications System	Not Defined	Official Fix	0.04	0.00159	CVE-2021-26906
07/12/2019	4.2	4.2	Digium Asterisk Open Source SDP chan_sip null pointer dereference	Communications System	Not Defined	Not Defined	0.02	0.00473	CVE-2019-13161
07/12/2019	6.4	6.4	Digium Asterisk res_pjsip_messaging memory corruption	Communications System	Not Defined	Not Defined	0.02	0.04717	CVE-2019-12827
11/14/2018	7.4	7.2	Digium Asterisk DNS SRV/NAPTR Lookup memory corruption	Communications System	Not Defined	Official Fix	0.03	0.00453	CVE-2018-19278
12/22/2017	6.4	6.1	Digium Asterisk PJSIP Channel Driver Contact Header input validation	Communications System	Not Defined	Official Fix	0.00	0.93850	CVE-2017-17850
12/13/2017	4.8	4.7	Digium Asterisk RTCP Stack memory corruption	Communications System	Not Defined	Official Fix	0.03	0.93840	CVE-2017-17664
12/02/2017	6.4	6.3	Digium Asterisk chan_skinny Channel Driver chan_skinny.c resource management	Communications System	High	Official Fix	0.00	0.69318	CVE-2017-17090
11/09/2017	5.6	5.4	Digium Asterisk pjsip Session Object memory corruption	Communications System	Not Defined	Official Fix	0.01	0.02090	CVE-2017-16672
11/09/2017	7.5	7.2	Digium Asterisk CDR Handller memory corruption	Communications System	Not Defined	Official Fix	0.02	0.01754	CVE-2017-16671
10/10/2017	7.4	7.2	Digium Asterisk RTCP Packet information disclosure	Communications System	Not Defined	Official Fix	0.00	0.00192	CVE-2017-14603
09/26/2017	7.5	7.5	Digium Asterisk GUI os command injection	Communications System	Not Defined	Not Defined	0.04	0.00156	CVE-2017-14001
09/02/2017	8.5	8.2	Digium Asterisk command injection	Communications System	Not Defined	Official Fix	0.00	0.96408	CVE-2017-14100
09/02/2017	6.4	6.1	Digium Asterisk res_rtp_asterisk.c information disclosure	Communications System	Not Defined	Official Fix	0.03	0.02365	CVE-2017-14099
09/02/2017	6.4	6.1	Digium Asterisk PJSIP Channel Driver input validation	Communications System	Not Defined	Official Fix	0.03	0.92718	CVE-2017-14098
08/02/2017	5.2	5.1	Digium Addons Module add-license-form.php cross site scripting	Unknown	Not Defined	Official Fix	0.03	0.00164	CVE-2015-2690
06/02/2017	7.4	7.1	Digium Asterisk PJSIP memory corruption	Communications System	Not Defined	Official Fix	0.03	0.01208	CVE-2017-9372
06/02/2017	6.4	6.1	Digium Asterisk PJSIP out-of-bounds	Communications System	Not Defined	Official Fix	0.01	0.00660	CVE-2017-9359
06/02/2017	6.4	6.1	Digium Asterisk SCCP Packet infinite loop	Communications System	Not Defined	Official Fix	0.03	0.00694	CVE-2017-9358
04/17/2017	6.4	6.1	Digium Asterisk chain_sip resource management	Communications System	Not Defined	Official Fix	0.00	0.04034	CVE-2016-7551
04/10/2017	7.5	7.2	Digium Asterisk CDR Dialplan Function memory corruption	Communications System	Not Defined	Official Fix	0.03	0.01725	CVE-2017-7617
12/08/2016	6.3	6.2	Digium Asterisk Invite Request improper authorization	Communications System	Not Defined	Official Fix	0.07	0.00196	CVE-2016-9938

122 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 122 results.

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!