Back to Database
Status published
Critical
CVE-2021-45461
FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40,...
Vulnerability Description
FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-45461
Credits & Attribution
No credits recorded in the NVD database.
References
More from sangoma
View All →CVE-2022-42706
An issue was discovered in Sangoma Asterisk through 16.28, 17...
Unknown
0
CVE-2022-42705
A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6,...
Unknown
0
CVE-2022-37325
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0,...
Unknown
0
CVE-2021-45310
Sangoma Technologies Corporation Switchvox Version 102409 is affected by an...
Medium
5.3
CVE-2020-10666
The restapps (aka Rest Phone apps) module for Sangoma FreePBX...
Critical
9.8
Affected Vendor
sangoma
View all reports →Affected Software
restapps
Vulnerable Versions:
15.0.19.87, 15.0.19.88, 16.0.18.40, 16.0.18.41
Timeline
Official Publish:
December 22nd, 2021
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.