What is the CVSS score of CVE-2024-24539?

CVE-2024-24539 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. EPSS exploitation probability: 0.5%.

Is there a patch available for CVE-2024-24539?

Yes, a patch is available for CVE-2024-24539. Update the affected software to the latest version immediately.

Fusionpbx CVE-2024-24539

MEDIUM

2024-03-18 cve@mitre.org

Information Disclosure Fusionpbx

5.3

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

CVE Published

Mar 18, 2024 - 03:15 cve.org

MEDIUM 5.3

DescriptionCVE.org

FusionPBX before 5.2.0 does not validate a session.

AnalysisAI

FusionPBX before 5.2.0 does not validate a session. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

Affected products include: Fusionpbx. Version information: before 5.2.0.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Fusionpbx

View all

CVE-2019-11409 HIGH Act Now POC

8.8 Jun 17

app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerabili

CVE-2021-43405 HIGH This Week POC

8.8 Nov 05

An issue was discovered in FusionPBX before 4.5.30. Rated high severity (CVSS 8.8), this vulnerability is remotely explo

CVE-2019-15029 HIGH This Week POC

8.8 Sep 05

FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service

CVE-2019-19388 MEDIUM This Month POC

6.1 Nov 29

A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote at

CVE-2019-19387 MEDIUM This Month POC

6.1 Nov 29

A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote attack

CVE-2019-19386 MEDIUM This Month POC

6.1 Nov 29

A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 all

CVE-2019-19385 MEDIUM This Month POC

6.1 Nov 29

A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to

CVE-2019-19384 MEDIUM This Month POC

6.1 Nov 29

A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote attackers to inj

CVE-2019-19367 MEDIUM This Month POC

6.1 Nov 27

A cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows remote attackers to inject

CVE-2019-19366 MEDIUM This Month POC

6.1 Nov 27

A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1 allows remote attackers

CVE-2019-11408 MEDIUM This Month POC

6.1 Jun 17

XSS in app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 allows remote unauthenticated at

CVE-2022-35153 CRITICAL Act Now

9.8 Aug 18

FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php. Rated critical severi

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2024-24539 vulnerability details – vuln.today

Back

Fusionpbx CVE-2024-24539

Severity by source

CVSS VectorVendor: mitre

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Fusionpbx

Same technique Information Disclosure

Share

External POC / Exploit Code