CVE-2024-35190

PoC —

CVSS 3.1

5.3 medium

EPSS

<1%p45

Published

May 17, 2024 (May 17, 2024)

Modified

Jun 17, 2026

Description

Asterisk is an open source private branch exchange and telephony toolkit. After upgrade to 18.23.0, ALL unauthorized SIP requests are identified as PJSIP Endpoint of local asterisk server. This vulnerability is fixed in 18.23.1, 20.8.1, and 21.3.1.

Vendors: sangoma
Products: asterisk
Weakness: CWE-303, CWE-480, CWE-670
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.