EUVD-2021-24182

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

FreeSWITCH lacks default SIP MESSAGE authentication before version 1.10.7, allowing spam and spoofing.

Reporter	Title	Published	Views	Family All 23
GithubExploit	Exploit for Missing Authentication for Critical Function in Freeswitch	28 Nov 202113:12	–	githubexploit
GithubExploit	TRYHACKME_FLATLINE_REPORT	7 May 202616:00	–	githubexploit
0day.today	FreeSWITCH 1.10.6 Missing SIP MESSAGE Authentication Exploit	26 Oct 202100:00	–	zdt
AlpineLinux	CVE-2021-37624	25 Oct 202116:10	–	alpinelinux
Circl	CVE-2021-37624	25 Oct 202120:14	–	circl
CNNVD	FreeSWITCH 访问控制错误漏洞	25 Oct 202100:00	–	cnnvd
CVE	CVE-2021-37624	25 Oct 202116:10	–	cve
Cvelist	CVE-2021-37624 FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing	25 Oct 202116:10	–	cvelist
NVD	CVE-2021-37624	25 Oct 202116:15	–	nvd
OpenVAS	FreeSWITCH < 1.10.7 Multiple Vulnerabilities	27 Oct 202100:00	–	openvas

[
  {
    "enisaIdVendor": [
      {
        "id": "f3e33a9a-8ba5-375b-a7dc-f089f8c46e68",
        "vendor": {
          "name": "signalwire"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "abbfdb5c-b85b-30b5-9940-2ecc8d1ed865",
        "product": {
          "name": "freeswitch"
        },
        "product_version": "< 1.10.7"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2021-37624
github	www.github.com/signalwire/freeswitch/security/advisories/GHSA-mjcm-q9h8-9xv3
github	www.github.com/signalwire/freeswitch/releases/tag/v1.10.7
openwall	www.openwall.com/lists/oss-security/2021/10/25/6
packetstormsecurity	www.packetstormsecurity.com/files/164628/FreeSWITCH-1.10.6-Missing-SIP-MESSAGE-Authentication.html
seclists	www.seclists.org/fulldisclosure/2021/Oct/44
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

CVSS 25

EPSS0.03491