CVE-2020-37153

HIGH

ASTPP VoIP 4.0.1 - Remote Code Execution

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-37153 has a selected CVSS score of 7.7 (high); EIP currently links 1 catalogued exploit.

Description

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with root permissions through cron task manipulation.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 11, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

ASTPP

Browse ASTPP / ASTPP
CVE List4.0.1affected

Proofs of concept

1

Catalogued exploits

ExploitDBASTPP VoIP 4.0.1 - Remote Code ExecutionExploitDB exploitby Fabien AUNAYNot analyzed1 file
ExploitDB
PoC details

References

5