Beveiligingsadvies

CVE-2025-30004

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-31 16:42:09
Laatst bijgewerkt 2025-12-27 16:47:39
Toegewezen door VulnCheck
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user. This issue affects CompletePBX: all versions up to and prior to 5.2.35