CVE-2022-24259

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p80

Published

Feb 4, 2022 (Feb 4, 2022)

Modified

Jun 17, 2026

Description

An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request.

Vendors: voipmonitor
Products: voipmonitor
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news1 stories

Critical Security Bugs Uncovered in VoIPmonitor Monitoring Software

The Hacker NewsMar 2, 07:24 UTC · Mar 2, 2022Vulnerability CVE-2022-24259 CVE-2022-24260 CVE-2022-24262