Asterisk Luki w zabezpieczeniach

Oś czasu

Rodzaj

Communications System10

Produkt

Asterisk PBX6
Asterisk Zaptel4

Przeciwdziałanie

Official Fix4
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined10

Wektor dostępu

Not Defined0
Physical0
Local4
Adjacent0
Network6

Uwierzytelnianie

Not Defined0
High0
Low0
None10

Interakcja z użytkownikiem

Not Defined0
Required0
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤66
≤70
≤82
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤66
≤70
≤82
≤92
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤66
≤70
≤82
≤92
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤72
≤82
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k2
<2k6
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (4): Open Source (2), PBX (5), Zaptel (2), s800i (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2020-11-074.84.6Asterisk PBX SIP Invite res_pjsip_session denial of serviceCommunications SystemNot DefinedOfficial Fix0.001140.00CVE-2020-28327
2020-11-065.95.6Asterisk PBX INVITE denial of serviceCommunications SystemNot DefinedOfficial Fix0.002180.00CVE-2020-28242
2019-10-297.47.4Asterisk PBX Call privilege escalationCommunications SystemNot DefinedNot Defined0.004050.00CVE-2009-3723
2019-02-285.45.1Asterisk Open Source memory corruptionCommunications SystemNot DefinedOfficial Fix0.001660.00CVE-2019-7251
2018-09-246.46.3Asterisk PBX res_http_websocket.so denial of serviceCommunications SystemNot DefinedOfficial Fix0.617460.03CVE-2018-17281
2018-06-125.45.1Asterisk Open Source TCP TLS weak authenticationCommunications SystemNot DefinedOfficial Fix0.006820.00CVE-2018-12228
2018-06-125.35.1Asterisk PBX ACL information disclosureCommunications SystemNot DefinedOfficial Fix0.041300.00CVE-2018-12227
2008-12-088.48.4Asterisk Zaptel torisa.c Local Privilege EscalationCommunications SystemNot DefinedNot Defined0.000570.00CVE-2008-5396
2008-03-2410.09.5Asterisk s800i privilege escalationCommunications SystemNot DefinedOfficial Fix0.033660.00CVE-2008-1390
2007-10-295.95.9Asterisk Zaptel sethdlc.c memory corruptionCommunications SystemNot DefinedNot Defined0.000570.00CVE-2007-5690

◂ PoprzedniPrzeglądKolejny ▸

Might our Artificial Intelligence support you?

Check our Alexa App!