PT-2021-7259 · Freepbx · Freepbx

Andrew

+3

·

Published

2021-12-22

·

Updated

2026-05-21

·

CVE-2021-45461

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions FreePBX versions 15.0.19.87 through 15.0.19.88 FreePBX versions 16.0.18.40 through 16.0.18.41
Description The issue allows remote attackers to execute arbitrary code. This has been exploited in the wild, with reports of attacks starting in December 2021. The attacks involved implanting web shells on VoIP servers, allowing for the execution of arbitrary commands on the compromised communication server. The goal of the attackers was to establish persistence and enable further exploitation of the host system. The attacks were linked to IP addresses in the Netherlands and DNS records referencing Russian websites.
Recommendations For FreePBX versions 15.0.19.87 through 15.0.19.88, update to version 15.0.20. For FreePBX versions 16.0.18.40 through 16.0.18.41, update to version 16.0.19. As a temporary workaround, consider disabling the restapps module until a patch is available. Restrict access to the vulnerable Rest Phone Apps module to minimize the risk of exploitation. Avoid using the vulnerable versions of restapps until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2022-04551
CVE-2021-45461

Affected Products

Freepbx