Known vulnerabilities in Certified Asterisk 13.21-cert1

Vendor: Digium (Linux Support Services)
Software: Certified Asterisk
Version: 13.21-cert1
Software CPE: cpe:2.3:a:digium_linux_support_services:certified_asterisk:*:*:*:*:*:rv110w_wireless-n_vpn_firewall:*:*
Website:
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Certified Asterisk version 13.21-cert1 Certified Asterisk 13.21-cert1 is affected by 4 vulnerabilities: 1 high, 3 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22936 - Improper input validation
CVE-2019-18976		 CWE-20 Medium
No
No
 13.21-cert5 22.11.2019 SB2019112218
#VU22935 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-18610		 CWE-78 High
No
No
 13.21-cert5 22.11.2019 SB2019112218
SB2019120225
#VU22934 - Improper Access Control
CVE-2019-18790		 CWE-284 Medium
No
No
 13.21-cert5 22.11.2019 SB2019112218
SB2019120226
#VU14912 - Stack-based buffer overflow
CVE-2018-17281		 CWE-121 Medium
No
No
 13.21-cert3 24.09.2018 SB2018092401
SB2018101714
SB2018112617