Known vulnerabilities in Certified Asterisk 16.8-cert13

Vendor: Digium (Linux Support Services)
Software: Certified Asterisk
Version: 16.8-cert13
Software CPE: cpe:2.3:a:digium_linux_support_services:certified_asterisk:*:*:*:*:*:rv110w_wireless-n_vpn_firewall:*:*
Website:
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Certified Asterisk version 16.8-cert13 Certified Asterisk 16.8-cert13 is affected by 4 vulnerabilities: 1 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69829 - Integer underflow
CVE-2022-37325		 CWE-191 Medium
No
No
 18.9-cert3 02.12.2022 SB2022120212
SB2023022363
#VU69828 - Improper Privilege Management
CVE-2022-42706		 CWE-269 Low
No
No
 18.9-cert3 02.12.2022 SB2022120212
SB2023022363
#VU69827 - Use After Free
CVE-2022-42705		 CWE-416 Low
No
No
 18.9-cert3 02.12.2022 SB2022120212
SB2023022363
#VU62391 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26651		 CWE-89 High
No
No
 16.8-cert14 19.04.2022 SB2022041930
SB2022112259