CVE-2017-14001 - An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior

Back Back to CVE browser

HIGH

An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior

Published Sep 26, 2017

8.8

HIGH

CVSS 3.0

EPSS 6.45%

Description

An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior. An OS command injection vulnerability has been identified that may allow the execution of arbitrary code on the system through the inclusion of OS commands in the URL request of the program.

Affected products

Vendor n/a Product Digium Asterisk GUI Default
n/a
- Version
  Digium Asterisk GUI
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Digium Asterisk GUI

n/a

Version	Status	Constraints
Digium Asterisk GUI	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

http://www.securityfocus.com/bid/100950
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-5516
Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-17-264-03
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/100950		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-5516		Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-17-264-03		x_refsource_MISCThird Party AdvisoryUS Government Resource