CVE-2019-19492

FreeSWITCH 1.6.10 through 1.10.1 has a default password in eventsocket.conf.xml...

Sensormatic Electronics victor

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls, Inc. Equipment: victor Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

CVE-2019-19492

CVE-2019-19492 affects FreeSWITCH versions 1.6.10–1.10.1 due to a default password in the event_socket.conf.xml. The underlying issue is the presence of a default credential in the event_socket component, which could allow unauthorized access if the default credentials are not changed. The connec...