CVE-2021-45461

Katalog CVE

CVSS 9.8 · Critical EPSS 21,7%

Kerentanan pada sangoma restapps. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19.

Rincian

Terbit di NVD

22 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

21,7% peluang dieksploitasi; lebih tinggi dari 97,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://community.freepbx.org/t/0-day-freepbx-exploit/80092 exploit · issue tracking · advisory vendor
• https://community.freepbx.org/t/security-issue-potential-rest-phone-apps-rce/80109 advisory vendor
• https://wiki.freepbx.org/display/FOP/2021-12-21+SECURITY%3A+Potential+Rest+Phone+Apps+RCE advisory vendor