CVE-2017-14001CWE-78

An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior

published September 26, 2017

CVSS
—
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior. An OS command injection vulnerability has been identified that may allow the execution of arbitrary code on the system through the inclusion of OS commands in the URL request of the program.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06447 · 93.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2017-09-26T02:00Z
EPSS history
Timeline
  • 26 SEP 02:00Z
    An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior
    cvelistv5