CVE-2022-24262

Summary

The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.voipmonitor.org/changelog-gui?major=5
• https://kerbit.io/research/read/blog/3

References

• https://www.voipmonitor.org/changelog-gui?major=5
• https://kerbit.io/research/read/blog/3

• ←Previous
• Next→