CVE-2019-11409: OS Command Injection
First published: Mon Jun 17 2019(Updated: )
app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative attackers to execute commands on the host. This can further lead to remote code execution when combined with an XSS vulnerability also present in the FusionPBX Operator Panel module.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fusionpbx Fusionpbx | =4.4.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/153256/FusionPBX-4.4.3-Remote-Command-Execution.html
- http://packetstormsecurity.com/files/155344/FusionPBX-Operator-Panel-exec.php-Command-Execution.html
- https://blog.gdssecurity.com/labs/2019/6/7/rce-using-caller-id-multiple-vulnerabilities-in-fusionpbx.html
- https://github.com/fusionpbx/fusionpbx/commit/e43ca27ba2d9c0109a6bf198fe2f8d79f63e0611
Frequently Asked Questions
What is CVE-2019-11409?
CVE-2019-11409 is a command injection vulnerability in the Operator Panel module in FusionPBX 4.4.3.
How severe is CVE-2019-11409?
CVE-2019-11409 has a severity rating of 8.8 (high).
Which software versions are affected by CVE-2019-11409?
FusionPBX version 4.4.3 is affected by CVE-2019-11409.
How can an attacker exploit CVE-2019-11409?
Authenticated non-administrative attackers can exploit CVE-2019-11409 to execute commands on the host, potentially leading to remote code execution.
Are there any references for further information on CVE-2019-11409?
Yes, you can find more information on CVE-2019-11409 in the following references: [Reference 1](http://packetstormsecurity.com/files/153256/FusionPBX-4.4.3-Remote-Command-Execution.html), [Reference 2](http://packetstormsecurity.com/files/155344/FusionPBX-Operator-Panel-exec.php-Command-Execution.html), [Reference 3](https://blog.gdssecurity.com/labs/2019/6/7/rce-using-caller-id-multiple-vulnerabilities-in-fusionpbx.html).
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/remedy
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/fusionpbx
- canonical/fusionpbx fusionpbx
- version/fusionpbx fusionpbx/4.4.3