CVE-2020-37104

🗓️ 11 Feb 2026 20:49:47Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 5 Views🌐 WEB

Unauthenticated attackers can download ASTPP backups by predicting six-digit PINs and fuzzing the URL.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2020-37104	11 Feb 202620:49	–	attackerkb
CNNVD	ASTPP 安全漏洞	11 Feb 202600:00	–	cnnvd
Cvelist	CVE-2020-37104 ASTPP 4.0.1 VoIP Billing - Database Backup Download	11 Feb 202620:49	–	cvelist
NVD	CVE-2020-37104	11 Feb 202621:16	–	nvd
OSV	CVE-2020-37104	11 Feb 202621:16	–	osv
Positive Technologies	PT-2026-7668	11 Feb 202600:00	–	ptsecurity
Vulnrichment	CVE-2020-37104 ASTPP 4.0.1 VoIP Billing - Database Backup Download	11 Feb 202620:49	–	vulnrichment

NVD

Vulners

CNA

Node

inextrix astppMatch4.0.1

[
  {
    "vendor": "ASTPP",
    "product": "ASTPP",
    "versions": [
      {
        "version": "4.0.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/astpp-voip-billing-database-backup-download
astppbilling	www.astppbilling.org/
exploit-db	www.exploit-db.com/exploits/47900
github	www.github.com/iNextrix/ASTPP

Parameter	Position	Path	Description	CWE
pin	path	database_backup/	Information disclosure via unauthenticated access to database backups by guessing 6-digit PIN and requesting backup file from /database_backup/.	CWE-538

05 Mar 2026 01:28Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.17.5

CVSS 48.7

EPSS0.00063

SSVC

CWE-538