Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Fonality Clear all filters
TI-2020-05945 CVE-2020-7351 · GHSA-fp83-q3j6-rggc

Fonality Trixbox CE Post-Authentication Command Injection

Priority HIGH 74

An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.65208 Published 2020-05-01 Fixed in 1.0, 1.1 CWE-78
TI-2016-02124 CVE-2016-2363 · GHSA-8qhv-pgj9-3529

Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak…

Priority LOW 35

Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access for unspecified command execution by leveragi…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00584 Published 2016-06-20 No fix listed CWE-264