3CX Phone System
Approved changes feed: RSS · Atom
cpe:2.3:h:3cx:phone_system:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | 3Cx (11906e06-a259-5a9c-ae5d-932194942bb7) |
|---|---|
| Product | Phone System (759605a7-0507-5100-bca0-b89c02a320dd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9972 |
not_vulnerable | 2026-06-08 05:14:26.739714 |
Details available
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><space> followed by <shift><enter>" mishandling.
Published: 2022-06-07T17:57:00.000Z
Updated: 2024-08-04T22:10:08.499Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9971 |
not_vulnerable | 2026-06-08 05:14:26.738537 |
Details available
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs because the -z (aka postrotate-command) option to tcpdump can be unsafe when used in conjunction with sudo.
Published: 2022-06-07T17:56:52.000Z
Updated: 2024-08-04T22:10:08.510Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.