Test ID:	1.3.6.1.4.1.25623.1.0.143163
Category:	General
Title:	Asterisk Multiple Vulnerabilities (AST-2019-006, AST-2019-007)
Summary:	Asterisk is prone to multiple vulnerabilities.
Description:	Summary: Asterisk is prone to multiple vulnerabilities. Vulnerability Insight: Asterisk is prone to multiple vulnerabilities: - AMI user could execute system commands (CVE-2019-18610) - SIP request can change address of a SIP peer (CVE-2019-18790) Affected Software/OS: Asterisk Open Source 13.x, 16.x, 17.x and 13.21 Certified Asterisk. Solution: Update to version 13.29.2, 16.6.2, 17.0.1, 13.21-cert5 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-18790 http://downloads.asterisk.org/pub/security/AST-2019-006.html https://www.asterisk.org/downloads/security-advisories https://lists.debian.org/debian-lts-announce/2019/11/msg00038.html https://lists.debian.org/debian-lts-announce/2022/04/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2019-18610 http://downloads.asterisk.org/pub/security/AST-2019-007.html
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.