CVE-2017-7617

CVE-2017-7617 describes a critical remote code execution vulnerability affecting Asterisk Open Source versions 13.x before 13.14.1 and 14.x before 14.3.1, and Certified Asterisk 13.13 before 13.13-cert3. This buffer overflow, stemming from a malformed CDR user field via X-ClientCode in chan_sip, the CDR dialplan function, or the AMI Monitor action, allows an authenticated attacker to execute arbitrary code. With a CVSS v3 score of 8.8 (HIGH), it presents a low-complexity network attack vector with high impact on confidentiality, integrity, and availability. Despite its severity and high FAUCET Risk Score, there is currently no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage.