CVE-2014-8413

HIGH

7.5

CVSS Severity Score

EPSS Score0.0760%

EPSS Percentile41.63th

Published2014年11月24日

Last Modified2026年5月6日

Vulnerability Description

The res_pjsip_acl module in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 does not properly create and load ACLs defined in pjsip.conf at startup, which allows remote attackers to bypass intended PJSIP ACL rules.

Affected Platforms (CPE)

📦

Digium

Asterisk

>= 12.0.0 and < 12.7.1

📦

Digium

Asterisk

>= 13.0.0 and < 13.0.1

References & Advisories

🔗 http://downloads.asterisk.org/pub/security/AST-2014-013.html

Vulnerability Description

Affected Platforms (CPE)

Asterisk

Asterisk

References & Advisories

相关漏洞威胁