Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-8418
HistoryNov 24, 2014 - 3:59 p.m.

CVE-2014-8418

2014-11-2415:59:10
CWE-264
[email protected]
web.nvd.nist.gov
90
cve-2014-8418
asterisk open source
security vulnerability
remote authentication
ami protocol
nvd

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.4%

JSON

The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8 before 1.8.28-cert8 and 11.6 before 11.6-cert8 allows remote authenticated users to gain privileges via a call from an external protocol, as demonstrated by the AMI protocol.

Affected configurations

NVD
Node
digiumcertified_asteriskMatch1.8.28
OR
digiumcertified_asteriskMatch1.8.28cert1lts
OR
digiumcertified_asteriskMatch1.8.28cert1-rc1
OR
digiumcertified_asteriskMatch1.8.28cert2
OR
digiumcertified_asteriskMatch1.8.28cert2lts
OR
digiumcertified_asteriskMatch1.8.28cert3
OR
digiumcertified_asteriskMatch1.8.28cert4
OR
digiumcertified_asteriskMatch1.8.28cert5
OR
digiumcertified_asteriskMatch11.6cert1
OR
digiumcertified_asteriskMatch11.6cert2
OR
digiumcertified_asteriskMatch11.6cert3
OR
digiumcertified_asteriskMatch11.6cert4
OR
digiumcertified_asteriskMatch11.6cert5
OR
digiumcertified_asteriskMatch11.6cert6
OR
digiumcertified_asteriskMatch11.6cert7
OR
digiumcertified_asteriskMatch11.6.0-
Node
digiumasteriskRange1.8.0–1.8.32.0
OR
digiumasteriskRange11.0.0–11.14.1
OR
digiumasteriskRange12.0.0–12.7.1

Related

debiancve 1
nvd 1
ubuntucve 1
prion 1
cvelist 1
nessus 4
freebsd 1
gentoo 1
openvas 2
osv 1
debian 1
debiancve
debiancve
CVE-2014-8418
2014-11-24 15:59:10
nvd
nvd
CVE-2014-8418
2014-11-24 15:59:10
ubuntucve
ubuntucve
CVE-2014-8418
2014-11-24 00:00:00
prion
prion
Design/Logic Flaw
2014-11-24 15:59:00
cvelist
cvelist
CVE-2014-8418
2014-11-24 15:00:00
nessus
nessus
FreeBSD : asterisk -- Multiple vulnerabilities (a92ed304-716c-11e4-b008-001999f8d30b)
2014-11-24 00:00:00
Asterisk Multiple Vulnerabilities (AST-2014-012 / AST-2014-018)
2014-11-25 00:00:00
GLSA-201412-51 : Asterisk: Multiple vulnerabilities
2014-12-29 00:00:00
freebsd
freebsd
asterisk -- Multiple vulnerabilities
2014-11-21 00:00:00
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2014-12-28 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201412-51
2015-09-29 00:00:00
Debian: Security Advisory (DLA-455-1)
2023-03-08 00:00:00
osv
osv
asterisk - security update
2016-05-03 00:00:00
debian
debian
[SECURITY] [DLA 455-1] asterisk security update
2016-05-03 20:31:18

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.4%

JSON
Related for CVE-2014-8418
debiancve1nvd1ubuntucve1prion1cvelist1nessus4freebsd1gentoo1openvas2osv1debian1