Lucene search
HistoryApr 04, 2023 - 1:15 p.m.
CVE-2023-25355
coredial
sipxcom
21.04
insecure permissions
vulnerability
user privileges
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
37.2%
CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the daemon user on a sipXcom server can overwrite a service file, and escalate their privileges to root.
Affected configurations
Node
coredialsipxcomRange≤21.04
References
Related
cvelist
cvelist
CVE-2023-25355
2023-04-04 00:00:00
cve
cve
CVE-2023-25355
2023-04-04 13:15:08
prion
prion
Code injection
2023-04-04 13:15:00
zdt
zdt
githubexploit
githubexploit
Exploit for Incorrect Default Permissions in Coredial Sipxcom
2024-09-04 11:00:23
packetstorm
packetstorm
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
37.2%
Related for NVD:CVE-2023-25355