ByteOS Network

NVD Vulnerability Details :

CVE-2018-19911

Analyzed

Source-cve@mitre.org

Published At-06 Dec, 2018 | 18:29

Updated At-24 Aug, 2020 | 17:37

FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/system (or api/bg_system or txtapi/bg_system) query string on TCP port 8080, as demonstrated by an api/system?calc URI. This can also be exploited via CSRF. Alternatively, the default password of works for the freeswitch account can sometimes be used.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	7.6	HIGH	AV:N/AC:H/Au:N/C:C/I:C/A:C

CPE Matches

freeswitch>>freeswitch>>Versions up to 1.8.2(inclusive)

cpe:2.3:a:freeswitch:freeswitch:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-352	Primary	nvd@nist.gov
CWE-77	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://github.com/iSafeBlue/freeswitch_rce/blob/master/README-en.md	cve@mitre.org	Exploit Third Party Advisory
https://github.com/iSafeBlue/freeswitch_rce/blob/master/freeswitch_rce.py	cve@mitre.org	Exploit Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History