328 matches found
Default credentials
The installation procedure in BigBlueButton before 2.2.28 or earlier uses ClueCon as the FreeSWITCH password, which allows local users to achieve unintended FreeSWITCH access...
CVE-2020-27613
The installation procedure in BigBlueButton before 2.2.28 or earlier uses ClueCon as the FreeSWITCH password, which allows local users to achieve unintended FreeSWITCH access...
CVE-2020-27613
Summary: CVE-2020-27613 affects BigBlueButton before 2.2.28 where the installation procedure uses ClueCon as the FreeSWITCH password, enabling local users to gain unintended FreeSWITCH access. Affected software: BigBlueButton (versions before 2.2.28). Vulnerability details: Local authentication w...
CVE-2020-27613: Cleartext Storage of Sensitive Information
The installation procedure in BigBlueButton before 2.2.28 or earlier uses ClueCon as the FreeSWITCH password, which allows local users to achieve unintended FreeSWITCH access...
FreeSWITCH 1.10.1 - Command Execution Exploit
Exploit Title: FreeSWITCH 1.10.1 - Command Execution Exploit Author: 1F98D Vendor Homepage: https://freeswitch.com/ Software Link: https://files.freeswitch.org/windows/installer/x64/FreeSWITCH-1.10.1-Release-x64.msi Version: 1.10.1 Tested on: Windows 10 x64 FreeSWITCH listens on port 8021 by...
FreeSWITCH 1.10.1 Command Execution
Exploit Title: FreeSWITCH 1.10.1 - Command Execution Date: 2019-12-19 Exploit Author: 1F98D Vendor Homepage: https://freeswitch.com/ Software Link: https://files.freeswitch.org/windows/installer/x64/FreeSWITCH-1.10.1-Release-x64.msi Version: 1.10.1 Tested on: Windows 10 x64 FreeSWITCH listens on...
FreeSWITCH 1.10.1 - Command Execution
FreeSWITCH 1.10.1 - Command Execution Exploit Title: FreeSWITCH 1.10.1 - Command Execution Date: 2019-12-19 Exploit Author: 1F98D Vendor Homepage: https://freeswitch.com/ Software Link: https://files.freeswitch.org/windows/installer/x64/FreeSWITCH-1.10.1-Release-x64.msi Version: 1.10.1 Tested on:...
FreeSWITCH 1.10.1 - Command Execution
Exploit Title: FreeSWITCH 1.10.1 - Command Execution Date: 2019-12-19 Exploit Author: 1F98D Vendor Homepage: https://freeswitch.com/ Software Link: https://files.freeswitch.org/windows/installer/x64/FreeSWITCH-1.10.1-Release-x64.msi Version: 1.10.1 Tested on: Windows 10 x64 FreeSWITCH listens on...
FreeSWITCH Detection Consolidation
Consolidation of FreeSWITCH detections. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute ...
FreeSWITCH Detection (HTTP)
Detection of FreeSWITCH over HTTP. This script performs HTTP based detection of FreeSWITCH. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License ...
FreeSWITCH RCE Vulnerability
FreeSWITCH is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
FreeSWITCH Default Password (mod_event_socket)
FreeSWITCH is using a known default password in the modeventsocket component. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
FreeSWITCH mod_event_socket Service Detection
A FreeSWITCH modeventsocket service is running at this host. modeventsocket is a TCP-based interface to control FreeSWITCH. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2019-19492
FreeSWITCH 1.6.10 through 1.10.1 has a default password in eventsocket.conf.xml...
CVE-2019-19492
FreeSWITCH 1.6.10 through 1.10.1 has a default password in eventsocket.conf.xml...
CVE-2019-19492
FreeSWITCH 1.6.10 through 1.10.1 has a default password in eventsocket.conf.xml...
Default credentials
FreeSWITCH 1.6.10 through 1.10.1 has a default password in eventsocket.conf.xml...
CVE-2019-19492
FreeSWITCH 1.6.10 through 1.10.1 has a default password in eventsocket.conf.xml...
CVE-2019-19492
CVE-2019-19492 affects FreeSWITCH versions 1.6.10–1.10.1 due to a default password in the event_socket.conf.xml. The underlying issue is the presence of a default credential in the event_socket component, which could allow unauthorized access if the default credentials are not changed. The connec...