CVE-2022-24262 | BDVDB-2026-169337 Detail

Description#

The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.voipmonitor.org/changelog-gui?major=5
https://kerbit.io/research/read/blog/3

Exploit#

No public exploit known

History#

Version 12022-02-04Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.