VoIPmonitor up to 24.60 Configuration config/configuration.php SPOOLDIR injection

Summaryinfo

A vulnerability categorized as critical has been discovered in VoIPmonitor up to 24.60. Affected by this issue is some unknown functionality of the file config/configuration.php of the component Configuration Handler. The manipulation of the argument SPOOLDIR results in injection. This vulnerability is known as CVE-2021-30461. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in VoIPmonitor up to 24.60 (IP Phone Software). It has been classified as critical. Affected is an unknown functionality of the file config/configuration.php of the component Configuration Handler. The manipulation of the argument SPOOLDIR with an unknown input leads to a injection vulnerability. CWE is classifying the issue as CWE-74. The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was published 05/29/2021. The advisory is shared for download at ssd-disclosure.com. This vulnerability is traded as CVE-2021-30461. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1055.

By approaching the search of inurl:config/configuration.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 24.61 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• IP Phone Software

Name

• VoIPmonitor

Version

• 24.0
• 24.1
• 24.2
• 24.3
• 24.4
• 24.5
• 24.6
• 24.7
• 24.8
• 24.9
• 24.10
• 24.11
• 24.12
• 24.13
• 24.14
• 24.15
• 24.16
• 24.17
• 24.18
• 24.19
• 24.20
• 24.21
• 24.22
• 24.23
• 24.24
• 24.25
• 24.26
• 24.27
• 24.28
• 24.29
• 24.30
• 24.31
• 24.32
• 24.33
• 24.34
• 24.35
• 24.36
• 24.37
• 24.38
• 24.39
• 24.40
• 24.41
• 24.42
• 24.43
• 24.44
• 24.45
• 24.46
• 24.47
• 24.48
• 24.49
• 24.50
• 24.51
• 24.52
• 24.53
• 24.54
• 24.55
• 24.56
• 24.57
• 24.58
• 24.59
• 24.60

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion