CVE-2024-42365

CVE-2024-42365 describes a critical vulnerability in Asterisk and Certified Asterisk versions prior to 18.24.2, 20.9.2, 21.4.2, 18.9-cert11, and 20.7-cert2, respectively. An authenticated AMI user with write=originate permissions can manipulate configuration files in /etc/asterisk/ by curling remote files and appending to existing ones. This flaw carries a CVSS score of 8.8 (High), indicating a network-exploitable vulnerability with low attack complexity that can lead to privilege escalation, remote code execution, and blind server-side request forgery. While not currently on the CISA KEV list or experiencing widespread community discussion, a Metasploit module for authenticated RCE exists, suggesting potential for exploitation. Organizations using affected Asterisk versions should prioritize patching to mitigate these severe risks.