CVE-2023-25355: Coredial Sipxcom

High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days.

CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the `daemon` user on a sipXcom server can overwrite a service file, and escalate their privileges to `root`.

Affected products

• Coredial Sipxcom: up to and including 21.04

Published 2023-04-04. Last modified 2026-06-17.