Back to Database
Status published
Critical
CVE-2020-10666
The restapps (aka Rest Phone apps) module for Sangoma FreePBX...
Vulnerability Description
The restapps (aka Rest Phone apps) module for Sangoma FreePBX and PBXact 13, 14, and 15 through 15.0.19.2 allows remote code execution via a URL variable to an AMI command.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-10666
Credits & Attribution
No credits recorded in the NVD database.
References
More from sangoma
View All →CVE-2022-42706
An issue was discovered in Sangoma Asterisk through 16.28, 17...
Unknown
0
CVE-2022-42705
A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6,...
Unknown
0
CVE-2022-37325
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0,...
Unknown
0
CVE-2021-45461
FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40,...
Critical
9.8
CVE-2021-45310
Sangoma Technologies Corporation Switchvox Version 102409 is affected by an...
Medium
5.3
Affected Vendor
sangoma
View all reports →Affected Software
restapps
Vulnerable Versions:
13.0, 14.0, 15.0
Timeline
Official Publish:
May 31st, 2021
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.