PatchTheCVEvoipmonitor vulnerabilities and fixes
Recent CVEs affecting voipmonitor, with upgrade or downgrade steps. 5 tracked.
voipmonitor has 5 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 4. Most recent: 2022-06-17. Highest priority: CVE-2022-24260 (score 69/100).
- CVE-2022-24262 HIGH 8.8 UPGRADE The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore arc
- CVE-2022-24260 CRITICAL 9.8 UPGRADE A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the
- CVE-2022-24259 CRITICAL 9.8 UPGRADE An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers
- CVE-2021-41408 CRITICAL 9.8 DOWNGRADE VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" par
- CVE-2021-30461 CRITICAL 9.8 UPGRADE A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61
FAQ
How do I fix voipmonitor vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is voipmonitor being exploited right now?
None of the tracked voipmonitor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which voipmonitor CVE should I patch first?
CVE-2022-24260 currently ranks highest (69/100): A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the .