CyberSecBulletin

Coredial vulnerabilities

We track 2 vulnerabilities in Coredial products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2023.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest Coredial vulnerabilities

  • 8.8 High severity

    Sipxcom: Improper Neutralization of Argument Delimiters in a Command

    CVE-2023-25356CoredialEPSS 2.15%

    CoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument Delimiters in a Command. XMPP users are able to inject arbitrary arguments into a system command, which can be used to read files from, and write files to, the sipX

  • 8.8 High severity

    Sipxcom: Incorrect Default Permissions

    CVE-2023-25355CoredialEPSS 2.5%

    CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the `daemon` user on a sipXcom server can overwrite a service file, and escalate their privileges to `root`.