CVE-2019-12147: Critical severity sangoma netborder/vega session vulnerability
The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field. Upon successful exploitation, a remote unauthenticated user can create a local system user with sudo privileges, and use that user to login to the system (either via the web interface or via SSH) to achieve complete compromise of the device. This affects /var/webconfig/gui/Webconfig.inc.php and /usr/local/sng/bin/sng-user-mgmt.
Affected Software
Event History
Frequently Asked Questions
What is vulnerability CVE-2019-12147?
Vulnerability CVE-2019-12147 refers to the Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface being vulnerable to Argument Injection via special characters in the username field.
What is the severity of vulnerability CVE-2019-12147?
The severity of vulnerability CVE-2019-12147 is critical with a severity value of 9.8.
How can a remote unauthenticated user exploit vulnerability CVE-2019-12147?
A remote unauthenticated user can exploit vulnerability CVE-2019-12147 by creating a local system user with sudo privileges through successful exploitation of the argument injection vulnerability.
What is the affected software by vulnerability CVE-2019-12147?
The affected software by vulnerability CVE-2019-12147 is Sangoma Session Border Controller (SBC) Firmware version 2.3.23-119 GA.
Are there any references available for vulnerability CVE-2019-12147?
Yes, there are references available for vulnerability CVE-2019-12147. You can find them at: http://packetstormsecurity.com/files/154914/Sangoma-SBC-2.3.23-119-GA-Unauthenticated-User-Creation.html, http://seclists.org/fulldisclosure/2019/Oct/40, and https://blog.appsecco.com.