CVE-2022-29330

PoC —

CVSS 3.1

4.9 medium

EPSS

<1%p59

Published

Jun 24, 2022 (Jun 24, 2022)

Modified

Jul 9, 2026

Description

Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecified vectors.

Vendors: vitalpbx
Products: vitalpbx
Weakness: CWE-330
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.