Inextrix
2 CVEs
vendor
Monthly
Multiple vulnerabilities in ASTPP 4.0.1 including XSS and command injection in SIP device configuration and plugin management. PoC available.
XSS
Command Injection
AWS
Astpp
Inextrix
NVD
GitHub
Exploit-DB
CVSS 3.1
9.8
EPSS
0.2%
Astpp versions up to 4.0.1 is affected by insertion of sensitive information into externally-accessible file (CVSS 7.5).
Information Disclosure
Astpp
Inextrix
NVD
GitHub
Exploit-DB
CVSS 3.1
7.5
EPSS
0.1%
EPSS 0%
CVSS 9.8
CRITICAL
POC
Act Now
Multiple vulnerabilities in ASTPP 4.0.1 including XSS and command injection in SIP device configuration and plugin management. PoC available.
XSS
Command Injection
AWS
+2
NVD
GitHub
Exploit-DB
EPSS 0%
CVSS 7.5
HIGH
POC
This Week
Astpp versions up to 4.0.1 is affected by insertion of sensitive information into externally-accessible file (CVSS 7.5).
Information Disclosure
Astpp
Inextrix
NVD
GitHub
Exploit-DB