CVE-2023-25356 | BDVDB-2026-199164 Detail

Description#

CoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument Delimiters in a Command. XMPP users are able to inject arbitrary arguments into a system command, which can be used to read files from, and write files to, the sipXcom server. This can also be leveraged to gain remote command execution.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-04-04Record published in the CVE List.
2. Version 22025-02-13Most recent update recorded in the CVE List.