CVE-2021-45966
published 2022-03-18CVE-2021-45966: An issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, /services/apply in exd.pl allows remote attackers to execute…
PriorityP260critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
5.62%
92.0th percentile
An issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, /services/apply in exd.pl allows remote attackers to execute arbitrary code via shell metacharacters.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| pascom | cloud_phone_system | <= 7.19 | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://kerbit.io/research/read/blog/4https://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.htmlhttps://www.pascom.net/doc/en/release-notes/https://kerbit.io/research/read/blog/4https://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.htmlhttps://www.pascom.net/doc/en/release-notes/
2022-03-18
Published