Phone System Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:3cx:phone_system_firmware:16.0.0.1570:*:*:*:*:*:*:*
part: o version: 16.0.0.1570 update: *
| Vendor | 3Cx (11906e06-a259-5a9c-ae5d-932194942bb7) |
|---|---|
| Product | Phone System Firmware (ec7b9c8a-84b0-503d-98a9-a651ce5fbb9b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9972 |
vulnerable | 2026-06-08 05:14:26.739688 |
Details available
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><space> followed by <shift><enter>" mishandling.
Published: 2022-06-07T17:57:00.000Z
Updated: 2024-08-04T22:10:08.499Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9971 |
vulnerable | 2026-06-08 05:14:26.737553 |
Details available
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs because the -z (aka postrotate-command) option to tcpdump can be unsafe when used in conjunction with sudo.
Published: 2022-06-07T17:56:52.000Z
Updated: 2024-08-04T22:10:08.510Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.