Lucene search
K

CVE-2021-37624 FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing

🗓️ 25 Oct 2021 16:10:10Reported by GitHub_MType 
cvelist
 cvelist
🔗 www.cve.org👁 22 Views

FreeSWITCH allows unauthenticated SIP MESSAGE requests, enabling spam and message spoofin

Related
Affected
Refs
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for Missing Authentication for Critical Function in Freeswitch
28 Nov 202113:12
githubexploit
GithubExploit
TRYHACKME_FLATLINE_REPORT
7 May 202616:00
githubexploit
0day.today
FreeSWITCH 1.10.6 Missing SIP MESSAGE Authentication Exploit
26 Oct 202100:00
zdt
AlpineLinux
CVE-2021-37624
25 Oct 202116:10
alpinelinux
Circl
CVE-2021-37624
25 Oct 202120:14
circl
CNNVD
FreeSWITCH 访问控制错误漏洞
25 Oct 202100:00
cnnvd
CVE
CVE-2021-37624
25 Oct 202116:10
cve
EUVD
EUVD-2021-24182
7 Oct 202500:30
euvd
NVD
CVE-2021-37624
25 Oct 202116:15
nvd
OpenVAS
FreeSWITCH < 1.10.7 Multiple Vulnerabilities
27 Oct 202100:00
openvas
Rows per page
[
  {
    "product": "freeswitch",
    "vendor": "signalwire",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.10.7"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 Oct 2021 17:06Current
7.8High risk
Vulners AI Score7.8
CVSS 3.17.5
EPSS0.03491
22