Read the docs

3CX

Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

3CX records in CISA KEV

No 3CX vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Phone System Firmware · all components

Priority MEDIUM 42

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><space> followed by <shi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01769 Published 2022-06-07 No fix listed CWE-77
Open these records in search →