high8.8
CVE-2019-9972
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesyste…
Impact
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><space> followed by <shift><enter>" mishandling.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 3cx | Phone System Firmware | Version 16.0.0.1570 |
| Debian | Debian Linux | All versions |