CVE-2019-12148

The CVE-2019-12148 issue affects Sangoma SBC 2.3.23-119 GA web interface, where an authentication bypass is triggered by an argument-injection flaw in the username field. Exploitation allows a remote unauthenticated attacker to log into the device’s admin web portal without credentials, affecting...

CVE-2019-12147

CVE-2019-12147 affects Sangoma SBC 2.3.23-119 GA web interface. The issue is Argument Injection via special characters in the username field, enabling a remote unauthenticated user to create a local privileged user (sudo) and subsequently access the system via web or SSH to compromise the device....