Known vulnerabilities in Certified Asterisk 18.9-cert2

Vendor: Digium (Linux Support Services)
Software: Certified Asterisk
Version: 18.9-cert2
Software CPE: cpe:2.3:a:digium_linux_support_services:certified_asterisk:*:*:*:*:*:rv110w_wireless-n_vpn_firewall:*:*
Website:
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Certified Asterisk version 18.9-cert2 Certified Asterisk 18.9-cert2 is affected by 9 vulnerabilities: 4 medium, 5 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114576 - Resource Management Errors
CVE-2025-54995		 CWE-399 Low
No
No
 18.9-cert17 30.08.2025 SB2025083019
#VU109794 - Protection Mechanism Failure
CVE-2025-47780		 CWE-693 Low
No
No
 18.9-cert14, 20.7-cert5 26.05.2025 SB2025052604
#VU109792 - Improper input validation
CVE-2025-47779		 CWE-20 Medium
No
No
 18.9-cert14, 20.7-cert5 26.05.2025 SB2025052604
#VU102519 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-53566		 CWE-22 Low
No
No
 18.9-cert13, 20.7-cert4 10.01.2025 SB2025011003
#VU96902 - NULL Pointer Dereference
CVE-2024-42491		 CWE-476 Medium
No
No
 18.9-cert12, 20.7-cert3 05.09.2024 SB20240905106
#VU95788 - Permissions, Privileges, and Access Controls
CVE-2024-42365		 CWE-264 Medium
Public exploit available
No
 18.9-cert11, 20.7-cert2 12.08.2024 SB2024081227
#VU69829 - Integer underflow
CVE-2022-37325		 CWE-191 Medium
No
No
 18.9-cert3 02.12.2022 SB2022120212
SB2023022363
#VU69828 - Improper Privilege Management
CVE-2022-42706		 CWE-269 Low
No
No
 18.9-cert3 02.12.2022 SB2022120212
SB2023022363
#VU69827 - Use After Free
CVE-2022-42705		 CWE-416 Low
No
No
 18.9-cert3 02.12.2022 SB2022120212
SB2023022363