Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field. Upon successful exploitation, a remote unauthenticated user can create a local system user with sudo privileges, and use that user to login to the system (either via the web interface or via SSH) to achieve complete compromise of the device. This affects /var/webconfig/gui/Webconfig.inc.php and /usr/local/sng/bin/sng-user-mgmt.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sangoma Technologies SBC 注入漏洞
Vulnerability Description
Sangoma Technologies SBC是加拿大Sangoma Technologies公司的一款边界会话控制器（SBC）。 Sangoma Technologies SBC 2.3.23-119-GA版本中存在安全漏洞。攻击者可借助该应用程序的登录界面利用该漏洞在系统上创建权限账户。
CVSS Information
N/A
Vulnerability Type
N/A