CVE-2022-35153: Command Injection
Published Aug 18, 2022
·Updated
FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/faxsend.php.
Affected Software
1 affected component
FusionPBX Fusionpbx=5.0.1
Remediation
Event History
Aug 18, 2022
CVE Published
via MITRE·04:16 AM
Data Sourced
via MITRE·04:16 AM
Description
Frequently Asked Questions
1
What is CVE-2022-35153?
CVE-2022-35153 is a command injection vulnerability in FusionPBX 5.0.1 via /fax/fax_send.php.
2
How severe is CVE-2022-35153?
CVE-2022-35153 has a severity rating of 9.8 (Critical).
3
How does CVE-2022-35153 affect FusionPBX?
CVE-2022-35153 affects FusionPBX 5.0.1.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-35153?
CVE-2022-35153 is associated with CWE-77 and CWE-116.
5
How can I fix CVE-2022-35153?
To fix CVE-2022-35153, update to a version of FusionPBX that includes the following commits: [commit 07679fe80dadb08ca23d0fc16c0f832348bfec78](https://github.com/fusionpbx/fusionpbx/commit/07679fe80dadb08ca23d0fc16c0f832348bfec78) and [commit de22a9121a091e7fedddff22329dd6149dc5ab28](https://github.com/fusionpbx/fusionpbx/commit/de22a9121a091e7fedddff22329dd6149dc5ab28)