Back to Database
Status published
High
CVE-2019-19538
In Sangoma FreePBX 13 through 15 and sysadmin (aka System...
Vulnerability Description
In Sangoma FreePBX 13 through 15 and sysadmin (aka System Admin) 13.0.92 through 15.0.13.6 modules have a Remote Command Execution vulnerability that results in Privilege Escalation.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-19538
Credits & Attribution
No credits recorded in the NVD database.
References
More from sangoma
View All →CVE-2022-42706
An issue was discovered in Sangoma Asterisk through 16.28, 17...
Unknown
0
CVE-2022-42705
A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6,...
Unknown
0
CVE-2022-37325
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0,...
Unknown
0
CVE-2021-45461
FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40,...
Critical
9.8
CVE-2021-45310
Sangoma Technologies Corporation Switchvox Version 102409 is affected by an...
Medium
5.3
Affected Vendor
sangoma
View all reports →Affected Software
freepbx
Vulnerable Versions:
0, 14.0.0.0, 15.0.0.0
Timeline
Official Publish:
March 16th, 2020
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.