3CX.Phone.System.VAD_Deploy.Arbitrary.File.Upload
Description
This indicates an attack attempt against an Arbitrary File Upload vulnerability in 3CX VoIP Phone System Manager.
The vulnerability is caused by an error when the vulnerable software handles a malicious HTTP request with a crafted URI. It allows a remote attacker to upload an arbitrary file via sending a crafted URI to a vulnerable application.
Affected Products
3CX Phone System v10
3CX Phone System v11
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://www.3cx.com/blog/news/security-bulletin/
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |