CyberSec.Space Logo
Back to CVE Browser

CVE-2019-9972

HIGH
8.8
CVSS Severity Score
EPSS Score0.0140%
EPSS Percentile22.86th
PublishedJun 7, 2022
Last ModifiedNov 21, 2024

Vulnerability Description

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><space> followed by <shift><enter>" mishandling.

Affected Platforms (CPE)

💻
3cx

Phone System Firmware

= 16.0.0.1570
💻
Debian

Debian Linux

All versions

References & Advisories

🔗 https://www.gosecure.net/blog
🔗 https://www.gosecure.net/blog/2022/05/31/security-advisory-multiple-vulnerabilities-impact-3cx-phone-system/
🔗 https://www.gosecure.net/blog
🔗 https://www.gosecure.net/blog/2022/05/31/security-advisory-multiple-vulnerabilities-impact-3cx-phone-system/

Related Vulnerabilities

CVE-2006-03747.5

Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available...

CVE-2019-160085.4

A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an auth...

CVE-2013-10063

A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions <= 1.0.4.80 in its embedded web server....

CVE-2019-1981010.0

Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. A remote un...