PT-2025-22513 · Sangoma+2 · Certified Asterisk+3

Published 2025-03-24 · Updated 2025-09-05 · CVE-2025-47779

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Asterisk versions prior to 18.26.2 Asterisk versions prior to 20.14.1 Asterisk versions prior to 21.9.1 Asterisk versions prior to 22.4.1 certified-asterisk versions prior to 18.9-cert14 certified-asterisk versions prior to 20.7-cert5

Description Asterisk is an open-source private branch exchange (PBX) that has a security issue where SIP requests of the type MESSAGE (RFC 3428) authentication do not get proper alignment. An authenticated attacker can spoof any user identity to send spam messages to the user with their authorization token. This can lead to spam and enable social engineering, phishing, and similar attacks.

Recommendations For Asterisk versions prior to 18.26.2, update to version 18.26.2 or later. For Asterisk versions prior to 20.14.1, update to version 20.14.1 or later. For Asterisk versions prior to 21.9.1, update to version 21.9.1 or later. For Asterisk versions prior to 22.4.1, update to version 22.4.1 or later. For certified-asterisk versions prior to 18.9-cert14, update to version 18.9-cert14 or later. For certified-asterisk versions prior to 20.7-cert5, update to version 20.7-cert5 or later.

Exploit

Fix

Weakness Enumeration

CWE-140

CWE-792

Related Identifiers

ALT-PU-2025-11102

BDU:2025-06642

CVE-2025-47779

DLA-4206-1

GHSA-2GRH-7MHV-FCFW

Affected Products

Alt Linux

Asterisk

Debian

Certified Asterisk

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47779.json · Exploit
• https://github.com/asterisk/asterisk/security/advisories/GHSA-2grh-7mhv-fcfw · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-47779 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-47779 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-47779 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47779 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-47779 · Security Note
• https://osv.dev/vulnerability/DLA-4206-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-47779 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06642 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-47779 · Vendor Advisory
• https://github.com/asterisk/asterisk/blob/master/configs/samples/pjsip.conf.sample · Note
• https://twitter.com/CVEnew/status/1925601153087099245 · Twitter Post
• https://t.me/latest_high_impact_cve/2444 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1925624426453721130 · Twitter Post