Asterisk Business Edition vulnerabilities

2 CVEs affecting Asterisk Business Edition, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-2264, published 2013-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-2186, published 2012-08-31. High severity, CVSS 9.0. EPSS: 3.6% chance of exploitation in the next 30 days. Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones…
CVE-2013-2264, published 2013-04-01. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x…