Known vulnerabilities in Certified Asterisk 18.9-cert5

Vendor: Digium (Linux Support Services)
Software: Certified Asterisk
Version: 18.9-cert5
Software CPE: cpe:2.3:a:digium_linux_support_services:certified_asterisk:*:*:*:*:*:rv110w_wireless-n_vpn_firewall:*:*
Website:
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Certified Asterisk version 18.9-cert5 Certified Asterisk 18.9-cert5 is affected by 6 vulnerabilities: 3 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114576 - Resource Management Errors
CVE-2025-54995		 CWE-399 Low
No
No
 18.9-cert17 30.08.2025 SB2025083019
#VU109794 - Protection Mechanism Failure
CVE-2025-47780		 CWE-693 Low
No
No
 18.9-cert14, 20.7-cert5 26.05.2025 SB2025052604
#VU109792 - Improper input validation
CVE-2025-47779		 CWE-20 Medium
No
No
 18.9-cert14, 20.7-cert5 26.05.2025 SB2025052604
#VU102519 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-53566		 CWE-22 Low
No
No
 18.9-cert13, 20.7-cert4 10.01.2025 SB2025011003
#VU96902 - NULL Pointer Dereference
CVE-2024-42491		 CWE-476 Medium
No
No
 18.9-cert12, 20.7-cert3 05.09.2024 SB20240905106
#VU95788 - Permissions, Privileges, and Access Controls
CVE-2024-42365		 CWE-264 Medium
Public exploit available
No
 18.9-cert11, 20.7-cert2 12.08.2024 SB2024081227