Sangoma الثغرات

التسلسل الزمني

النوع

منتج

Sangoma Asterisk17
Sangoma FreePBX9
Sangoma Certified Asterisk5
Sangoma PBXact3
Sangoma Session Border Controller2

معالجة

Official Fix12
Temporary Fix0
Workaround0
Unavailable0
Not Defined20

قابلية الاستغلال

High0
Functional0
Proof-of-Concept0
Unproven1
Not Defined31

متجه الوصول

Not Defined0
Physical1
Local0
Adjacent10
Network21

توثيق

Not Defined0
High5
Low16
None11

تفاعل المستخدم

Not Defined0
Required4
None28

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤45
≤53
≤610
≤76
≤83
≤94
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤45
≤53
≤610
≤77
≤82
≤95
≤100

VulDB

≤10
≤20
≤34
≤45
≤56
≤66
≤73
≤87
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤55
≤60
≤78
≤86
≤93
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k11
<2k13
<5k8
<10k0
<25k0
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k32
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (11): Asterisk (17), Certified Asterisk (5), Corporation Switchvox (1), FreePBX (9), NetBorder (1), PBXact (3), Session Border Controller (2), Vega Session Controller (1), WANPIPE (1), cg6kwin2k.sys (1), sysadmin (1)

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
25/03/20246.66.3Sangoma cg6kwin2k.sys IOCTL Request تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000430.03CVE-2024-29216
02/11/20237.17.0Sangoma FreePBX تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.004340.00CVE-2023-43336
27/04/20235.85.8Sangoma FreePBX Asterisk Manager Interface variable الكشف عن المعلوماتغير معروفNot DefinedNot Defined0.001370.04CVE-2023-26567
06/12/20225.55.5Sangoma Asterisk Setup Message ooq931.c الحرمان من الخدمةCommunications SystemNot DefinedNot Defined0.002220.00CVE-2022-37325
06/12/20225.25.2Sangoma Asterisk Manager Interface اجتياز الدليلCommunications SystemNot DefinedNot Defined0.001530.04CVE-2022-42706
06/12/20225.45.4Sangoma Asterisk Subscription res_pjsip_pubsub.c الحرمان من الخدمةCommunications SystemNot DefinedNot Defined0.002090.00CVE-2022-42705
30/08/20225.04.9Sangoma Asterisk/Certified Asterisk T.38 Re-Invite res_pjsip_t38 الحرمان من الخدمةCommunications SystemNot DefinedOfficial Fix0.001310.00CVE-2021-46837
15/02/20224.34.3Sangoma Corporation Switchvox تجاوز الصلاحياتغير معروفNot DefinedNot Defined0.001090.00CVE-2021-45310
31/07/20213.53.4Sangoma Asterisk/Certified Asterisk IAX2 Channel Driver الحرمان من الخدمةCommunications SystemNot DefinedOfficial Fix0.005990.00CVE-2021-32558
30/07/20215.55.3Sangoma Asterisk PJSIP Privilege EscalationCommunications SystemNot DefinedOfficial Fix0.003100.00CVE-2021-31878

22 بعض الادخالات لم يتم عرضها

Do you want to use VulDB in your project?

Use the official API to access entries easily!