Sipxcom vulnerabilities

2 known vulnerabilities in Sipxcom from Coredial. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Sipxcom: Improper Neutralization of Argument Delimiters in a Command

  CVE-2023-25356Apr 4, 2023CoredialEPSS 2.15%

  CoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument Delimiters in a Command. XMPP users are able to inject arbitrary arguments into a system command, which can be used to read files from, and write files to, the sipX

• 8.8 High severity

  Sipxcom: Incorrect Default Permissions

  CVE-2023-25355Apr 4, 2023CoredialEPSS 2.5%

  CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the `daemon` user on a sipXcom server can overwrite a service file, and escalate their privileges to `root`.