Sangoma 漏洞

时间轴

类型

Communications System17
Not Defined15

产品

Sangoma Asterisk17
Sangoma FreePBX9
Sangoma Certified Asterisk5
Sangoma PBXact3
Sangoma Session Border Controller2

修正

Official Fix12
Temporary Fix0
Workaround0
Unavailable0
Not Defined20

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven1
Not Defined31

访问向量

Not Defined0
Physical1
Local0
Adjacent10
Network21

身份验证

Not Defined0
High5
Low16
None11

用户交互

Not Defined0
Required4
None28

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤45
≤53
≤610
≤76
≤83
≤94
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤45
≤53
≤610
≤77
≤82
≤95
≤100

VulDB

≤10
≤20
≤34
≤45
≤56
≤66
≤73
≤87
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤55
≤60
≤78
≤86
≤93
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k11
<2k13
<5k8
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k32
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (11): Asterisk (17), Certified Asterisk (5), Corporation Switchvox (1), FreePBX (9), NetBorder (1), PBXact (3), Session Border Controller (2), Vega Session Controller (1), WANPIPE (1), cg6kwin2k.sys (1), sysadmin (1)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2024-03-256.66.3Sangoma cg6kwin2k.sys IOCTL Request 权限升级未知Not DefinedOfficial Fix0.000430.03CVE-2024-29216
2023-11-027.17.0Sangoma FreePBX 权限升级未知Not DefinedOfficial Fix0.004340.02CVE-2023-43336
2023-04-275.85.8Sangoma FreePBX Asterisk Manager Interface variable 信息公开未知Not DefinedNot Defined0.001370.04CVE-2023-26567
2022-12-065.55.5Sangoma Asterisk Setup Message ooq931.c 拒绝服务Communications SystemNot DefinedNot Defined0.002220.00CVE-2022-37325
2022-12-065.25.2Sangoma Asterisk Manager Interface 目录遍历Communications SystemNot DefinedNot Defined0.001530.04CVE-2022-42706
2022-12-065.45.4Sangoma Asterisk Subscription res_pjsip_pubsub.c 拒绝服务Communications SystemNot DefinedNot Defined0.002090.00CVE-2022-42705
2022-08-305.04.9Sangoma Asterisk/Certified Asterisk T.38 Re-Invite res_pjsip_t38 拒绝服务Communications SystemNot DefinedOfficial Fix0.001110.00CVE-2021-46837
2022-02-154.34.3Sangoma Corporation Switchvox 权限升级未知Not DefinedNot Defined0.001090.00CVE-2021-45310
2021-07-313.53.4Sangoma Asterisk/Certified Asterisk IAX2 Channel Driver 拒绝服务Communications SystemNot DefinedOfficial Fix0.005990.00CVE-2021-32558
2021-07-305.55.3Sangoma Asterisk PJSIP Privilege EscalationCommunications SystemNot DefinedOfficial Fix0.003100.00CVE-2021-31878

22 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 22 results.

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!