CVE-2021-45461

CRITICAL

FreePBX restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 Remote Code Execution

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2021-45461 has a selected CVSS score of 9.8 (critical).

Description

FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 22, 2021 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

1
ProductSourceVersion range

restapps

Browse Sangoma / restapps
VulnCheckVersion data not supplied

References

4