VYPR
← All advisories
High severity8.8NVD Advisory· Published Nov 22, 2019· Updated Jun 17, 2026

CVE-2019-18610

CVE-2019-18610

Description

An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated Asterisk Manager Interface (AMI) user without system authorization could use a specially crafted Originate AMI request to execute arbitrary system commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Digium/Asterisk
    cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*
    Range: >=13.0.0,<13.29.2
  • Digium/Certified Asterisk6 versions
    cpe:2.3:a:digium:certified_asterisk:13.21.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:digium:certified_asterisk:13.21.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.21.0:cert1:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.21.0:cert2:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.21.0:cert3:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.21.0:cert4:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.21.0:rc1:*:*:*:*:*:*
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • Sangoma/Asteriskdescription
  • Freepbx/Asteriskllm-create
    Range: <=13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.