PT-2017-14019 · 3Cx · 3Cx Phone System

Jens Regel · Published 2017-10-18 · Updated 2017-11-13 · CVE-2017-15359

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions 3CX Phone System version 15.5.3554.1

Description The issue allows for a directory traversal attack, which can be exploited by an authenticated attacker to access sensitive information. This can aid in subsequent attacks. The vulnerable API endpoints are "/api/RecordingList/DownloadRecord?file=" and "/api/SupportInfo?file=", where the file parameter is used to traverse directories.

Recommendations For 3CX Phone System version 15.5.3554.1, consider restricting access to the "/api/RecordingList/DownloadRecord?file=" and "/api/SupportInfo?file=" API endpoints to minimize the risk of exploitation. As a temporary workaround, restrict the use of the file parameter in these endpoints until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2017-15359

Affected Products

3Cx Phone System

References · 4

• 🔥 https://exploit-db.com/exploits/42991 · Exploit
• https://osv.dev/vulnerability/CVE-2017-15359 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-15359 · Security Note
• http://seclists.org/fulldisclosure/2017/Oct/37 · Note