CVE-2023-25356: Coredial Sipxcom

High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days.

CoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument Delimiters in a Command. XMPP users are able to inject arbitrary arguments into a system command, which can be used to read files from, and write files to, the sipXcom server. This can also be leveraged to gain remote command execution.

Affected products

• Coredial Sipxcom: up to and including 21.04

Published 2023-04-04. Last modified 2026-06-17.