Known vulnerabilities in Certified Asterisk 20.7-cert3 - page 2

Version: 20.7-cert3
Software CPE: cpe:2.3:a:digium_linux_support_services:certified_asterisk:*:*:*:*:*:rv110w_wireless-n_vpn_firewall:*:*
Website:
Total vulnerabilities: 30
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Certified Asterisk version 20.7-cert3 Certified Asterisk 20.7-cert3 is affected by 30 vulnerabilities: 3 high, 13 medium, 14 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125901 - Out-of-bounds read
CVE-2026-33069
CWE-125 Medium
No
No
20.7-cert10, 22.8-cert2 14.04.2026 SB2026030657
SB2026052528
#VU125899 - Use After Free
CVE-2026-32942
CWE-416 High
No
No
20.7-cert10, 22.8-cert2 14.04.2026 SB2026030657
SB2026052528
#VU123622 - Use After Free
CVE-2026-28799
CWE-416 High
No
No
20.7-cert10, 22.8-cert2 06.03.2026 SB2026030657
SB2026052528
#VU122443 - Incorrect Default Permissions
CVE-2026-23741
CWE-276 Low
No
No
20.7-cert9 06.02.2026 SB2026020664
#VU122442 - Uncontrolled Search Path Element
CVE-2026-23740
CWE-427 Low
No
No
20.7-cert9 06.02.2026 SB2026020664
#VU122441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-23738
CWE-79 Low
No
No
20.7-cert9 06.02.2026 SB2026020664
#VU122440 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-23739
CWE-611 Low
No
No
20.7-cert9 06.02.2026 SB2026020664
#VU109794 - Protection Mechanism Failure
CVE-2025-47780
CWE-693 Low
No
No
18.9-cert14, 20.7-cert5 26.05.2025 SB2025052604
#VU109792 - Improper input validation
CVE-2025-47779
CWE-20 Medium
No
No
18.9-cert14, 20.7-cert5 26.05.2025 SB2025052604
#VU102519 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-53566
CWE-22 Low
No
No
18.9-cert13, 20.7-cert4 10.01.2025 SB2025011003


Showing elements 21 - 40 out of 30