CVE-2020-7351 in Trixbox Community Editioninformación

Resumen

por MITRE

An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user. Note that Trixbox Community Edition has been unsupported by the vendor since 2012. This issue affects: Fonality Trixbox Community Edition, versions 1.2.0 through 2.8.0.4. Versions 1.0 and 1.1 are unaffected.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

Rapid7, Inc.

Reservar

2020-01-21

Moderación

aceptado

Artículo

VDB-154686

CPE

listo

EPSS

0.65208

KEV

no

Actividades

muy bajo

Fuentes

Do you want to use VulDB in your project?

Use the official API to access entries easily!