CVE-2019-12147

🗓️ 22 Oct 2019 15:47:35Reported by mitreType

cve🔗 web.nvd.nist.gov👁 101 Views🌐 WEB

The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field. Upon successful exploitation, a remote unauthenticated user can create a local system user with sudo privileges, and use that user to login to the system (either via the web interface or via SSH) to achieve complete compromise of the device

Reporter	Title	Published	Views	Family All 11
zdt	Sangoma SBC 2.3.23-119-GA Unauthenticated User Creation Vulnerability	22 Oct 201900:00	–	zdt
CNVD	Unspecified Vulnerability in Sangoma Technologies SBCs	21 Oct 201900:00	–	cnvd
Cvelist	CVE-2019-12147	22 Oct 201915:47	–	cvelist
EUVD	EUVD-2019-3797	7 Oct 202500:30	–	euvd
NVD	CVE-2019-12147	22 Oct 201916:15	–	nvd
OSV	CVE-2019-12147	22 Oct 201916:15	–	osv
Packet Storm	Sangoma SBC 2.3.23-119-GA Unauthenticated User Creation	18 Oct 201900:00	–	packetstorm
Prion	Design/Logic Flaw	22 Oct 201916:15	–	prion
Positive Technologies	PT-2019-12659	18 Oct 201900:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2019-12147: Improper Neutralization of Argument Delimiters in a Command	22 Oct 201900:00	–	rapid7

NVD

Node

AND

sangoma session_border_controller_firmwareMatch2.3.23-119-ga

sangoma session_border_controllerMatch-

Source	Link
blog	www.blog.appsecco.com/
packetstormsecurity	www.packetstormsecurity.com/files/154914/Sangoma-SBC-2.3.23-119-GA-Unauthenticated-User-Creation.html
seclists	www.seclists.org/fulldisclosure/2019/Oct/40

Parameter	Position	Path	Description	CWE
username	request body	/var/webconfig/gui/Webconfig.inc.php	Web login input via the username field can be crafted to inject additional arguments into the backend sng-user-mgmt, enabling creation of a privileged local user.	CWE-88
username	path	/usr/local/sng/bin/sng-user-mgmt	Backend utility invoked by the web interface; when extra arguments are supplied via the username payload, it can create privileged users (via --action=add and -o).	CWE-88

17 Jun 2026 02:14Current

9.2Critical risk

Vulners AI Score9.2

CVSS 25

CVSS 3.19.8

EPSS0.02626

CWE-88