PT-2021-3637 · Unknown · Voipmonitor

Furkan Göksel · Published 2021-05-10 · Updated 2021-06-09 · CVE-2021-30461

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VoIPmonitor versions prior to 24.61

Description A remote code execution issue was discovered in the web UI of VoIPmonitor. The issue is related to incorrect management of code generation in the config/configuration.php component. When the recheck option is used, the user-supplied SPOOLDIR value, which might contain PHP code, is injected into config/configuration.php. This allows a remote attacker to execute arbitrary PHP code.

Recommendations For versions prior to 24.61, update to version 24.61 or later to resolve the issue. As a temporary workaround, consider restricting access to the config/configuration.php file to minimize the risk of exploitation. Avoid using the SPOOLDIR value in the affected web UI until the issue is resolved.

Exploit

Fix

Special Elements Injection

Code Injection

Weakness Enumeration

CWE-74

CWE-94

Related Identifiers

BDU:2021-03856

CVE-2021-30461

Affected Products

Voipmonitor

References · 10

• 🔥 https://github.com/Al1ex/CVE-2021-30461 · Exploit
• 🔥 https://github.com/Vulnmachines/CVE-2021-30461 · Exploit
• 🔥 https://ssd-disclosure.com/ssd-advisory--voipmonitor-unauth-rce · Exploit
• https://osv.dev/vulnerability/CVE-2021-30461 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03856 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-30461 · Security Note
• https://t.me/cybersecuritytechnologies/3338 · Telegram Post
• https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce · Note
• https://vuldb.com/?id.176100 · Note
• https://t.me/cvenotify/15282 · Telegram Post