VDB

CVE-2021-37706

CVE-2021-37706 PUBLISHED CVSS 9.300000190734863 CRITICAL

Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis. Certified Asterisk ist eine komplette Multiprotokoll Telefonanlage (PBX) auf Softwarebasis mit erweitertem Support.

EPSS 4.62% · 90.8th percentile

Risk Scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
4.62%
90.8th percentile

Affected Products

VendorProductVersions
DigiumDigium Certified Asterisk <16.8-cert13
Open SourceOpen Source Asterisk <18.10.1
Open SourceOpen Source Asterisk <19.2.1
UbuntuUbuntu Linux
Open SourceOpen Source Asterisk <16.24.1
DebianDebian Linux

Timeline

  • Dec 22, 2021 CVE Published
  • Dec 23, 2021 EPSS Score
  • Feb 15, 2022 EPSS Score
  • Mar 5, 2022 EPSS Score
  • Jun 3, 2022 EPSS Score
  • Jul 28, 2022 EPSS Score
  • Sep 21, 2022 EPSS Score
  • Nov 14, 2022 EPSS Score
  • Mar 2, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 25, 2023 EPSS Score
  • Jun 18, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›