1. Home
  2. CVE Database
  3. CVE-2022-29330
MEDIUM · 4.9

CVE-2022-29330

Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecifie...

Vulnerability Description

Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecified vectors.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
VitalpbxVitalpbx< 3.2.1

Related Weaknesses (CWE)

CWE-330

References

FAQ

What is CVE-2022-29330?

CVE-2022-29330 is a vulnerability with a CVSS score of 4.9 (MEDIUM). Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecifie...

How severe is CVE-2022-29330?

CVE-2022-29330 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-29330?

Check the references section above for vendor advisories and patch information. Affected products include: Vitalpbx Vitalpbx.