CVE-2019-18610

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated Asterisk Manager Interface (AMI) user without system authorization could use a specially crafted Originate AMI request to execute arbitrary system commands.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://downloads.asterisk.org/pub/security/AST-2019-007.htmlPatch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/11/msg00038.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/04/msg00001.htmlMailing List, Third Party Advisory
https://www.asterisk.org/downloads/security-advisoriesVendor Advisory
http://downloads.asterisk.org/pub/security/AST-2019-007.htmlPatch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/11/msg00038.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/04/msg00001.htmlMailing List, Third Party Advisory
https://www.asterisk.org/downloads/security-advisoriesVendor Advisory

Timeline

Published: Nov 22, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-186116.5An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive information within oversighted edit summari CVE-2019-186125.3An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Previously hidden (restricted) AbuseFilter filters were vie CVE-2019-186147.8On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an overflow. This is because the maximum BLOC CVE-2019-186154.9In CloudVision Portal (CVP) for all releases in the 2018.2 Train, under certain conditions, the application logs user passwords in plain tex CVE-2019-186186.0Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to CVE-2019-186197.8Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) all CVE-2019-18627.2A vulnerability in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute c CVE-2019-186229.8An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the CVE-2019-186239.8Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the CVE-2019-186249.8Opera Mini for Android allows attackers to bypass intended restrictions on .apk file download/installation via an RTLO (aka Right to Left Ov CVE-2019-186257.5An issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based signature by faking a closed TCP session using an e CVE-2019-186264.3Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo val