CVE-2018-19911: freeswitch
Vulnerability summary
CVE-2018-19911 is a high (CVSS 7.6) vulnerability in freeswitch. EPSS estimates a 2.70% chance of exploitation in the next 30 days, higher than 86% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (GitHub, Date unknown)
Source freshness unavailable
How is this decided?Timeline
- 06-12-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/system (or api/bg_system or txtapi/bg_system) query string on TCP port 8080, as demonstrated by an api/system?calc URI. This can also be exploited via CSRF. Alternatively, the default password of works for the freeswitch account can sometimes be used.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.70%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.70% on 11-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundFreeswitch Rce
Maturity: poc
Weaknesses
CWE · root cause- CWE-77Improper Neutralization of Special Elements used in a CommandThe product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
- CWE-352Cross-Site Request ForgeryThe web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Affected systems
Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Freeswitch1 product
- freeswitch≤ 1.8.2
1 vendor · 1 product
References
2 links- github.com/iSafeBlue/freeswitch_rce/blob/master/freeswitch_rce.pyX Refsource MISCExploitThird Party Advisory
- github.com/iSafeBlue/freeswitch_rce/blob/master/README-en.mdX Refsource MISCExploitThird Party Advisory