Read the docs

Fonality

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Fonality records in CISA KEV

No Fonality vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fonality 3 records MEDIUM Hud Web 1 record LOW

Records

4 records

TI-2020-05945 CVE-2020-7351 · GHSA-fp83-q3j6-rggc

Fonality Trixbox CE Post-Authentication Command Injection

Priority HIGH 74

An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.65208 Published 2020-05-01 Fixed in 1.0, 1.1 CWE-78
TI-2016-02124 CVE-2016-2363 · GHSA-8qhv-pgj9-3529

Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak…

Priority LOW 35

Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access for unspecified command execution by leveragi…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00584 Published 2016-06-20 No fix listed CWE-264
Open these records in search →