CVE-2019-9972

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the…

published June 7, 2022

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><space> followed by <shift><enter>" mishandling.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01742 · 77.6th percentile
Published
2022-06-07T17:57Z
EPSS history
Timeline
  • 07 JUN 17:57Z
    PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the…
    cvelistv5