5

CVE-2014-8412

The (1) VoIP channel drivers, (2) DUNDi, and (3) Asterisk Manager Interface (AMI) in Asterisk Open Source 1.8.x before 1.8.32.1, 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8.28 before 1.8.28-cert3 and 11.6 before 11.6-cert8 allows remote attackers to bypass the ACL restrictions via a packet with a source IP that does not share the address family as the first ACL entry.

Data is provided by the National Vulnerability Database (NVD)
Digium ≫ Certified Asterisk Version1.8.28 Updatecert1 SwEditionlts
Digium ≫ Certified Asterisk Version1.8.28 Updatecert2 SwEditionlts
Digium ≫ Certified Asterisk Version1.8.28.0 SwEditionlts
Digium ≫ Certified Asterisk Version11.6 Updatecert1 SwEditionlts
Digium ≫ Certified Asterisk Version11.6 Updatecert2 SwEditionlts
Digium ≫ Certified Asterisk Version11.6 Updatecert3 SwEditionlts
Digium ≫ Certified Asterisk Version11.6 Updatecert4 SwEditionlts
Digium ≫ Certified Asterisk Version11.6 Updatecert5 SwEditionlts
Digium ≫ Certified Asterisk Version11.6 Updatecert6 SwEditionlts
Digium ≫ Certified Asterisk Version11.6 Updatecert7 SwEditionlts
Digium ≫ Certified Asterisk Version11.6.0 SwEditionlts
Digium ≫ Asterisk Version >= 1.8.0 < 1.8.32.1
Digium ≫ Asterisk Version >= 11.0.0 < 11.14.1
Digium ≫ Asterisk Version >= 12.0.0 < 12.7.1
Digium ≫ Asterisk Version >= 13.0.0 < 13.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.6% 0.686
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N