PT-2021-21740 · Unknown+1 · Freeswitch+1

Andywolk · Published 2021-10-25 · Updated 2023-10-08 · CVE-2021-37624

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.10.7

Description The issue concerns the lack of authentication for SIP MESSAGE requests in FreeSWITCH, leading to potential spam and message spoofing. By default, SIP requests of the type MESSAGE are not authenticated, allowing attackers to send messages to any SIP user agent registered with the server without requiring authentication. This can enable social engineering, phishing, and similar attacks. The maintainers recommend that this SIP message type be authenticated by default.

Recommendations For versions prior to 1.10.7, update to version 1.10.7 to resolve the issue. As a temporary workaround, consider setting the auth-messages parameter to true to enable authentication for SIP MESSAGE requests. Restrict access to the SIP MESSAGE endpoint to minimize the risk of exploitation. Avoid relying on the default setting and explicitly configure authentication for SIP MESSAGE requests.

Exploit

Fix

Improper Authentication

Missing Authentication

Weakness Enumeration

CWE-287

CWE-306

Related Identifiers

ALT-PU-2021-3374

ALT-PU-2021-3448

ALT-PU-2023-5726

CVE-2021-37624

GHSA-MJCM-Q9H8-9XV3

Affected Products

Alt Linux

Freeswitch

References · 12

• 🔥 https://github.com/0xInfection/PewSWITCH · Exploit
• 🔥 http://packetstormsecurity.com/files/164628/FreeSWITCH-1.10.6-Missing-SIP-MESSAGE-Authentication.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2021/Oct/44 · Exploit
• https://osv.dev/vulnerability/CVE-2021-37624 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37624 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2021-37624 · Vendor Advisory
• https://github.com/signalwire/freeswitch/security/advisories/GHSA-mjcm-q9h8-9xv3 · Note
• https://github.com/signalwire/freeswitch/releases/tag/v1.10.7 · Note
• https://t.me/cybersecuritytechnologies/4913 · Telegram Post
• https://security.alpinelinux.org/vuln/CVE-2021-37624 · Note
• https://t.me/cibsecurity/31157 · Telegram Post
• http://openwall.com/lists/oss-security/2021/10/25/6 · Note