Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2020-19288 CVE-2020-37153 · GHSA-6p6h-r7gh-4hj6

ASTPP VoIP 4.0.1 - Remote Code Execution

Priority HIGH 75

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.04906 Published 2026-02-11 No fix listed CWE-79
Priority MEDIUM 45

ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database backup files by predicting backup filename patterns.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00627 Published 2026-02-11 No fix listed CWE-538