Digiumphones

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-2686 MEDIUM This Month

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Open Source Certified Asterisk Digiumphones

NVD

CVSS 2.0

5.0

EPSS

2.4%

CVE-2013-2264 MEDIUM This Month

The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Open Source Certified Asterisk Business Edition Digiumphones

NVD

CVSS 2.0

5.0

EPSS

0.2%

CVE-2012-2186 CRITICAL PATCH Act Now

Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Open Source Asterisk Certified Asterisk Digiumphones +1

NVD

CVSS 2.0

9.0

EPSS

0.5%

CVE-2013-2686

EPSS 2% CVSS 5.0

MEDIUM This Month

Buffer Overflow Denial Of Service Open Source +2

NVD

CVE-2013-2264

EPSS 0% CVSS 5.0

MEDIUM This Month

Information Disclosure Open Source Certified Asterisk +2

NVD

CVE-2012-2186

EPSS 0% CVSS 9.0

CRITICAL PATCH Act Now

Information Disclosure Open Source Asterisk +3

NVD