Sipxcom

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:coredial:sipxcom:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCoredial (12327a02-2cc2-54aa-98ac-432d8e14b588)
ProductSipxcom (902f9b17-0a06-5cca-aab6-9f0c19c57d71)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25356 vulnerable 2026-06-08 05:56:08.748499 Details available
CoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument Delimiters in a Command. XMPP users are able to inject arbitrary arguments into a system command, which can be used to read files from, and write files to, the sipXcom server. This can also be leveraged to gain remote command execution.
Published: 2023-04-04T00:00:00.000Z
Updated: 2025-02-13T15:49:16.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25355 vulnerable 2026-06-08 05:56:08.748076 Details available
CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the `daemon` user on a sipXcom server can overwrite a service file, and escalate their privileges to `root`.
Published: 2023-04-04T00:00:00.000Z
Updated: 2025-02-13T15:51:55.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.