Asterisknow

Vendor:

First CVE: Jul 18, 2007 · Active for 19 years

13

Total CVEs

More Total CVEs than 91% of tracked products

6.5

Avg CVEs / Year

Higher CVE frequency than 91% of tracked products

6.3

Avg CVSS

Higher Avg CVSS than 27% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Asterisknow over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 18, 2007

19 years ago

Most Recent CVE

Jul 24, 2008

6,575 days ago

CVE Severity & Scoring

Asterisknow13 CVEs

46%

All CVEs352,427 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown13 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown13 (100.0%)

User Interaction

None0 (0.0%)

Unknown13 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown13 (100.0%)

Top CVEs

Signals from CVEs in this product scope (13 CVEs).

13 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2008-0095MEDIUM The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revis	Jan 8, 2008	5.0	38	NO	YES
CVE-2007-3764MEDIUM The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before	Jul 18, 2007	5.0	37	NO	YES
CVE-2007-3763MEDIUM The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.	Jul 18, 2007	5.0	34	NO	YES
CVE-2008-1289HIGH Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0	Mar 24, 2008	7.5	33	NO	YES
CVE-2008-1390HIGH The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance D	Mar 24, 2008	9.3	27	NO	NO
CVE-2008-1332HIGH Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2;	Mar 20, 2008	8.8	26	NO	NO
CVE-2007-3762HIGH Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appl	Jul 18, 2007	9.3	25	NO	NO
CVE-2008-3264HIGH The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x	Jul 24, 2008	7.8	21	NO	NO
CVE-2008-1923HIGH The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an u	Apr 23, 2008	7.1	19	NO	NO
CVE-2007-4455MEDIUM The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk Appl	Aug 22, 2007	5.0	15	NO	NO

View all 13 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (13 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

4 CVEs

30.8% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (13 CVEs).

Media Mentions

Signals from CVEs in this product scope (13 CVEs).

Top CNAs Publishing CVEs For Asterisknow

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
pre-release	1	7.8	3.4%	0
beta_7	2	8.6	3.6%	0
beta_6	6	6.9	12.1%	2
beta_5	6	6.9	12.1%	2
1.0.1	2	5.7	2.1%	0
1.0	4	7.4	2.6%	0