Astpp

2 CVEs product

Monthly

CVE-2020-37153 Feb 11, 21:16 CRITICAL POC Act Now

Multiple vulnerabilities in ASTPP 4.0.1 including XSS and command injection in SIP device configuration and plugin management. PoC available.

XSS Command Injection AWS Astpp Inextrix

NVD GitHub Exploit-DB

CVSS 3.1

9.8

EPSS

0.2%

CVE-2020-37104 Feb 11, 21:16 HIGH POC This Week

Astpp versions up to 4.0.1 is affected by insertion of sensitive information into externally-accessible file (CVSS 7.5).

Information Disclosure Astpp Inextrix

NVD GitHub Exploit-DB

CVSS 3.1

7.5

EPSS

0.1%

CVE-2020-37153

EPSS 0% CVSS 9.8

CRITICAL POC Act Now

Multiple vulnerabilities in ASTPP 4.0.1 including XSS and command injection in SIP device configuration and plugin management. PoC available.

XSS Command Injection AWS +2

NVD GitHub Exploit-DB

CVE-2020-37104

EPSS 0% CVSS 7.5

HIGH POC This Week

Astpp versions up to 4.0.1 is affected by insertion of sensitive information into externally-accessible file (CVSS 7.5).

Information Disclosure Astpp Inextrix

NVD GitHub Exploit-DB