Known vulnerabilities in Certified Asterisk 16.8-cert2

Vendor: Digium (Linux Support Services)
Software: Certified Asterisk
Version: 16.8-cert2
Software CPE: cpe:2.3:a:digium_linux_support_services:certified_asterisk:*:*:*:*:*:rv110w_wireless-n_vpn_firewall:*:*
Website:
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Certified Asterisk version 16.8-cert2 Certified Asterisk 16.8-cert2 is affected by 9 vulnerabilities: 3 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69829 - Integer underflow
CVE-2022-37325		 CWE-191 Medium
No
No
 18.9-cert3 02.12.2022 SB2022120212
SB2023022363
#VU69828 - Improper Privilege Management
CVE-2022-42706		 CWE-269 Low
No
No
 18.9-cert3 02.12.2022 SB2022120212
SB2023022363
#VU69827 - Use After Free
CVE-2022-42705		 CWE-416 Low
No
No
 18.9-cert3 02.12.2022 SB2022120212
SB2023022363
#VU62391 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26651		 CWE-89 High
No
No
 16.8-cert14 19.04.2022 SB2022041930
SB2022112259
#VU60862 - Use After Free
CVE-2022-23608		 CWE-416 High
No
No
 16.8-cert13 24.02.2022 SB2022022414
SB2022030601
SB2022112259
and 3 more
#VU60861 - Out-of-bounds read
CVE-2022-21723		 CWE-125 Medium
No
No
 16.8-cert13 24.02.2022 SB2022022414
SB2022030601
SB2022112259
and 3 more
#VU60857 - Integer overflow
CVE-2021-37706		 CWE-190 High
No
No
 16.8-cert13 24.02.2022 SB2022022414
SB2022030601
SB2022112259
and 4 more
#VU55295 - Uncaught Exception
CVE-2021-32686		 CWE-248 Medium
No
No
 16.8-cert10 26.07.2021 SB2021072606
SB2021072608
SB2021110229
and 2 more
#VU55294 - Improper input validation
CVE-2021-32558		 CWE-20 Medium
No
No
 16.8-cert10 26.07.2021 SB2021072607
SB2021110229