Lucene search

PRIOn knowledge basePRION:CVE-2023-25355

HistoryApr 04, 2023 - 1:15 p.m.

Code injection

2023-04-0413:15:00

PRIOn knowledge base

www.prio-n.com

code injection

coredial

21.04

insecure permissions

daemon user

service file

privilege escalation

nvd

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%

JSON

CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the daemon user on a sipXcom server can overwrite a service file, and escalate their privileges to root.

CPENameOperatorVersion
sipxcomle21.04

CPE	Name	Operator	Version
	sipxcom	le	21.04

References

seclists.org/fulldisclosure/2023/Mar/5