CVE-2021-45461 FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 202...
CriticalCVSS 9.8
EPSS 21.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Sangoma restapps | = 15.0.19.87 | No fix listed |
| Sangoma restapps | = 15.0.19.88 | No fix listed |
| Sangoma restapps | = 16.0.18.40 | No fix listed |
| Sangoma restapps | = 16.0.18.41 | No fix listed |
References
- community.freepbx.org exploit issue-tracking vendor-advisory
- community.freepbx.org vendor-advisory
- wiki.freepbx.org vendor-advisory