CVE-2019-12147

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field. Upon successful exploitation, a remote unauthenticated user can create a local system user with sudo privileges, and use that user to login to th...

CVE-2019-12147

CVE-2019-12147 affects Sangoma SBC 2.3.23-119 GA web interface. The issue is Argument Injection via special characters in the username field, enabling a remote unauthenticated user to create a local privileged user (sudo) and subsequently access the system via web or SSH to compromise the device....

CVE-2019-12148

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device's admin...

CVE-2019-12147: Improper Neutralization of Argument Delimiters in a Command

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field. Upon successful exploitation, a remote unauthenticated user can create a local system user with sudo privileges, and use that user to login to th...

CVE-2019-12148: Improper Neutralization of Argument Delimiters in a Command

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device's admin...

PT-2019-12659

Name of the Vulnerable Software and Affected Versions Sangoma Session Border Controller SBC version 2.3.23-119 GA Description The issue allows for Argument Injection via special characters in the username field, enabling a remote unauthenticated user to create a local system user with sudo...

PT-2019-12660

Name of the Vulnerable Software and Affected Versions Sangoma Session Border Controller SBC version 2.3.23-119 GA Description The issue allows for an authentication bypass via an argument injection vulnerability involving special characters in the username field. This enables a remote...

OpenSSL CVE-2018-0732 Denial of Service Vulnerability

Description OpenSSL is prone to denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected OpenSSL Project OpenSSL 1.0.2 OpenSSL Project OpenSSL 1.0.2a OpenSSL Project OpenSSL 1.0.2b OpenSSL Project OpenSSL 1.0.2c OpenSSL...

CVE-2014-6465

Unspecified vulnerability in the Oracle Communications Session Border Controller component in Oracle Communications Applications SCX640m5 allows remote authenticated users to affect availability via unknown vectors related to Lawful Intercept...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Communications Session Border Controller component in Oracle Communications Applications SCX640m5 allows remote authenticated users to affect availability via unknown vectors related to Lawful Intercept...

CVE-2014-6465

Technical details for CVE-2014-6465 are not publicly provided in the supplied documents. The record notes an unspecified vulnerability in Oracle Communications Session Border Controller with remote authentication and availability impact; no specific exploit, affected versions, or fixes are disclo...

CVE-2014-6465

Unspecified vulnerability in the Oracle Communications Session Border Controller component in Oracle Communications Applications SCX640m5 allows remote authenticated users to affect availability via unknown vectors related to Lawful Intercept...

CVE-2014-6465: Undefined Security Weakness

Unspecified vulnerability in the Oracle Communications Session Border Controller component in Oracle Communications Applications SCX640m5 allows remote authenticated users to affect availability via unknown vectors related to Lawful Intercept...

PT-2014-7233

Name of the Vulnerable Software and Affected Versions Oracle Communications Session Border Controller version SCX640m5 Description The issue affects the availability of the system, allowing remote authenticated users to impact it via unknown vectors related to Lawful Intercept. Recommendations Fo...

CVE-2013-4780

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-4778

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors...

CVE-2013-4779

Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Session fixation

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to read arbitrary files via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4781

Affected products: Siemens OpenScape Branch appliance and OpenScape Session Border Controller (SBC). Vulnerable component: core/getLog.php. Vulnerability: remote attackers can execute arbitrary commands via unspecified vectors. Affected versions: OpenScape Branch before 2 R0.32.0 and OpenScape SB...