9

CVE-2012-2186

Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 allows remote authenticated users to execute arbitrary commands by leveraging originate privileges and providing an ExternalIVR value in an AMI Originate action.

Data is provided by the National Vulnerability Database (NVD)
Asterisk ≫ Open Source Version1.8.0
Asterisk ≫ Open Source Version1.8.0 Updatebeta1
Asterisk ≫ Open Source Version1.8.0 Updatebeta2
Asterisk ≫ Open Source Version1.8.0 Updatebeta3
Asterisk ≫ Open Source Version1.8.0 Updatebeta4
Asterisk ≫ Open Source Version1.8.0 Updatebeta5
Asterisk ≫ Open Source Version1.8.0 Updaterc1
Asterisk ≫ Open Source Version1.8.0 Updaterc2
Asterisk ≫ Open Source Version1.8.0 Updaterc3
Asterisk ≫ Open Source Version1.8.0 Updaterc4
Asterisk ≫ Open Source Version1.8.0 Updaterc5
Asterisk ≫ Open Source Version1.8.1
Asterisk ≫ Open Source Version1.8.1 Updaterc1
Asterisk ≫ Open Source Version1.8.1.1
Asterisk ≫ Open Source Version1.8.1.2
Asterisk ≫ Open Source Version1.8.2
Asterisk ≫ Open Source Version1.8.2 Updaterc1
Asterisk ≫ Open Source Version1.8.2.1
Asterisk ≫ Open Source Version1.8.2.2
Asterisk ≫ Open Source Version1.8.2.3
Asterisk ≫ Open Source Version1.8.2.4
Asterisk ≫ Open Source Version1.8.3
Asterisk ≫ Open Source Version1.8.3 Updaterc1
Asterisk ≫ Open Source Version1.8.3 Updaterc2
Asterisk ≫ Open Source Version1.8.3 Updaterc3
Asterisk ≫ Open Source Version1.8.3.1
Asterisk ≫ Open Source Version1.8.3.2
Asterisk ≫ Open Source Version1.8.3.3
Asterisk ≫ Open Source Version1.8.4
Asterisk ≫ Open Source Version1.8.4 Updaterc1
Asterisk ≫ Open Source Version1.8.4 Updaterc2
Asterisk ≫ Open Source Version1.8.4 Updaterc3
Asterisk ≫ Open Source Version1.8.4.1
Asterisk ≫ Open Source Version1.8.4.2
Asterisk ≫ Open Source Version1.8.4.3
Asterisk ≫ Open Source Version1.8.4.4
Asterisk ≫ Open Source Version1.8.5 Updaterc1
Asterisk ≫ Open Source Version1.8.5.0
Asterisk ≫ Open Source Version1.8.6.0
Asterisk ≫ Open Source Version1.8.6.0 Updaterc1
Asterisk ≫ Open Source Version1.8.6.0 Updaterc2
Asterisk ≫ Open Source Version1.8.6.0 Updaterc3
Asterisk ≫ Open Source Version1.8.7
Asterisk ≫ Open Source Version1.8.7.0
Asterisk ≫ Open Source Version1.8.7.0 Updaterc1
Asterisk ≫ Open Source Version1.8.7.0 Updaterc2
Asterisk ≫ Open Source Version1.8.7.1
Asterisk ≫ Open Source Version1.8.7.2
Asterisk ≫ Open Source Version1.8.8.0
Asterisk ≫ Open Source Version1.8.8.0 Updaterc1
Asterisk ≫ Open Source Version1.8.8.0 Updaterc2
Asterisk ≫ Open Source Version1.8.8.0 Updaterc3
Asterisk ≫ Open Source Version1.8.8.0 Updaterc4
Asterisk ≫ Open Source Version1.8.8.0 Updaterc5
Asterisk ≫ Open Source Version1.8.8.1
Asterisk ≫ Open Source Version1.8.8.2
Asterisk ≫ Open Source Version1.8.9.0
Asterisk ≫ Open Source Version1.8.9.0 Updaterc1
Asterisk ≫ Open Source Version1.8.9.0 Updaterc2
Asterisk ≫ Open Source Version1.8.9.0 Updaterc3
Asterisk ≫ Open Source Version1.8.9.1
Asterisk ≫ Open Source Version1.8.9.2
Asterisk ≫ Open Source Version1.8.9.3
Asterisk ≫ Open Source Version1.8.10.0
Asterisk ≫ Open Source Version1.8.10.0 Updaterc1
Asterisk ≫ Open Source Version1.8.10.0 Updaterc2
Asterisk ≫ Open Source Version1.8.10.0 Updaterc3
Asterisk ≫ Open Source Version1.8.10.0 Updaterc4
Asterisk ≫ Open Source Version1.8.10.1
Asterisk ≫ Open Source Version1.8.11.0
Asterisk ≫ Open Source Version1.8.11.0 Updaterc2
Asterisk ≫ Open Source Version1.8.11.0 Updaterc3
Asterisk ≫ Open Source Version1.8.11.1
Asterisk ≫ Open Source Version1.8.12
Asterisk ≫ Open Source Version1.8.12.0
Asterisk ≫ Open Source Version1.8.12.0 Updaterc1
Asterisk ≫ Open Source Version1.8.12.0 Updaterc2
Asterisk ≫ Open Source Version1.8.12.0 Updaterc3
Sangoma ≫ Asterisk Version <= 1.8.15.0
Asterisk ≫ Open Source Version10.0.0
Asterisk ≫ Open Source Version10.0.0 Updatebeta1
Asterisk ≫ Open Source Version10.0.0 Updatebeta2
Asterisk ≫ Open Source Version10.0.0 Updaterc1
Asterisk ≫ Open Source Version10.0.0 Updaterc2
Asterisk ≫ Open Source Version10.0.0 Updaterc3
Asterisk ≫ Open Source Version10.0.1
Asterisk ≫ Open Source Version10.1.0
Asterisk ≫ Open Source Version10.1.0 Updaterc1
Asterisk ≫ Open Source Version10.1.0 Updaterc2
Asterisk ≫ Open Source Version10.1.1
Asterisk ≫ Open Source Version10.1.2
Asterisk ≫ Open Source Version10.1.3
Asterisk ≫ Open Source Version10.2.0
Asterisk ≫ Open Source Version10.2.0 Updaterc1
Asterisk ≫ Open Source Version10.2.0 Updaterc2
Asterisk ≫ Open Source Version10.2.0 Updaterc3
Asterisk ≫ Open Source Version10.2.0 Updaterc4
Asterisk ≫ Open Source Version10.2.1
Asterisk ≫ Open Source Version10.3
Asterisk ≫ Open Source Version10.3.0
Asterisk ≫ Open Source Version10.3.0 Updaterc2
Asterisk ≫ Open Source Version10.3.0 Updaterc3
Asterisk ≫ Open Source Version10.3.1
Asterisk ≫ Open Source Version10.4.0
Asterisk ≫ Open Source Version10.4.0 Updaterc1
Asterisk ≫ Open Source Version10.4.0 Updaterc2
Asterisk ≫ Open Source Version10.4.0 Updaterc3
Sangoma ≫ Asterisk Version <= 10.7.0
Asterisk ≫ Certified Asterisk Updatecert5 Version <= 1.8.11
Asterisk ≫ Certified Asterisk Version1.8.11 Updatecert
Asterisk ≫ Certified Asterisk Version1.8.11 Updatecert1
Asterisk ≫ Certified Asterisk Version1.8.11 Updatecert2
Asterisk ≫ Certified Asterisk Version1.8.11 Updatecert3
Asterisk ≫ Certified Asterisk Version1.8.11 Updatecert4
Asterisk ≫ Digiumphones Version <= 10.7.0
Asterisk ≫ Business Edition Version <= c.3.7.5
Asterisk ≫ Business Edition Versionc.3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.47% 0.615
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C