Asterisk Asterisk-Addons vulnerabilities

2 CVEs affecting Asterisk Asterisk-Addons, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-2543, published 2008-06-05.

More from Asterisk.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-2543, published 2008-06-05. Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days. The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication, and…
• CVE-2007-5488, published 2007-10-17. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in cdr_addon_mysql in Asterisk-Addons before 1.2.8, and 1.4.x before 1.4.4, allow remote attackers to execute arbitrary SQL commands via the (1) source and (2)…