Voipmonitor vulnerabilities
We track 2 vulnerabilities in Voipmonitor products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 4, 2022.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Voipmonitor vulnerabilities
- 8.8 High severity
Voipmonitor: Unrestricted Upload of File with Dangerous Type
The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.
- 9.8 Critical severity
Voipmonitor: Improper Authentication
An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request.