CVE-2019-9972

HIGH

8.8

CVSS Severity Score

EPSS Score0.0140%

EPSS Percentile22.86th

Published2022年6月7日

Last Modified2024年11月21日

Vulnerability Description

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><space> followed by <shift><enter>" mishandling.

Affected Platforms (CPE)

💻

3cx

Phone System Firmware

= 16.0.0.1570

💻

Debian

Debian Linux

All versions

References & Advisories

🔗 https://www.gosecure.net/blog

🔗 https://www.gosecure.net/blog/2022/05/31/security-advisory-multiple-vulnerabilities-impact-3cx-phone-system/