CVE-2019-11409
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 87%
from disclosure to weapon156 days
Published on NVDJun 17
1st PoC+156d
metasploitJun 6
exploitation probability
87%top 1% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative attackers to execute commands on the host. This can further lead to remote code execution when combined with an XSS vulnerability also present in the FusionPBX Operator Panel module.
Affected products
n/a · n/apublic PoCs found — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/47697cve_referencepacketstormsecurity.com/files/153256/FusionPBX-4.4.3-Remote-Command-Execution.htmlunverifiedcve_referencepacketstormsecurity.com/files/155344/FusionPBX-Operator-Panel-exec.php-Command-Execution.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/153256/FusionPBX-4.4.3-Remote-Command-Execution.htmlhttp://packetstormsecurity.com/files/155344/FusionPBX-Operator-Panel-exec.php-Command-Execution.htmlhttps://blog.gdssecurity.com/labs/2019/6/7/rce-using-caller-id-multiple-vulnerabilities-in-fusionpbx.htmlhttps://github.com/fusionpbx/fusionpbx/commit/e43ca27ba2d9c0109a6bf198fe2f8d79f63e0611