7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.9%
The res_pjsip_acl module in Asterisk Open Source 12.x before 12.7.1 and
13.x before 13.0.1 does not properly create and load ACLs defined in
pjsip.conf at startup, which allows remote attackers to bypass intended
PJSIP ACL rules.