CVE-2022-29330: Vitalpbx

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecified vectors.

Affected products

• Vitalpbx Vitalpbx: before 3.2.1 (fixed in 3.2.1)

Published 2022-06-24. Last modified 2026-07-09.