CVE-2020-37153
ASTPP VoIP 4.0.1 - Remote Code Execution
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.7EPSS 4.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
11 feb 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with root permissions through cron task manipulation.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
ASTPP · ASTPP¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →