CVE-2023-49294

high-risk
Published 2023-12-14

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the `live_dangerously` is not enabled. This allows arbitrary files to be read. Asterisk versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, contain a fix for this issue.

Do I need to act?

!
17.1% chance of exploitation in next 30 days
EPSS score — higher than 83% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.9/10 Medium
NETWORK / LOW complexity

Affected Products (20)

Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk
Certified Asterisk

Affected Vendors

Digium Sangoma

References (8)

Product https://github.com/asterisk/asterisk/blob/master/main/manager.c#L3757
Patch https://github.com/asterisk/asterisk/commit/424be345639d75c6cb7d0bd2da5f0f407dbd...
Vendor Advisory https://github.com/asterisk/asterisk/security/advisories/GHSA-8857-hfmw-vg8f
https://lists.debian.org/debian-lts-announce/2023/12/msg00019.html
Product https://github.com/asterisk/asterisk/blob/master/main/manager.c#L3757
Patch https://github.com/asterisk/asterisk/commit/424be345639d75c6cb7d0bd2da5f0f407dbd...
Vendor Advisory https://github.com/asterisk/asterisk/security/advisories/GHSA-8857-hfmw-vg8f
https://lists.debian.org/debian-lts-announce/2023/12/msg00019.html
55
/ 100
high-risk
Severity 20/34 · Moderate
Exploitability 13/34 · Low
Exposure 22/34 · High