CVE-2020-7351 in the critical feed json
Fonality Trixbox CE Post-Authentication Command Injection
published 2020-05-01 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-28478
- cvss
- 7.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 65.2%
- EPSS 65.2% chance of exploitation in 30 days, percentile 99.2%
- public exploits
- 1
- Metasploit
Summary
An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user. Note that Trixbox Community Edition has been unsupported by the vendor since 2012. This issue affects: Fonality Trixbox Community Edition, versions 1.2.0 through 2.8.0.4. Versions 1.0 and 1.1 are unaffected.
Patch / fix
- Fonality Trixbox Community Edition 1.0, 1.1
- github.com/rapid7/metasploit-framework#13353 pull request
Timeline
- First public exploit (Metasploit exploit/unix/webapp/trixbox_ce_endpoint_devicemap_rce)
- Published
Exploit prediction
65.21% chance of exploitation in the next 30 days, higher than 99.2% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/unix/webapp/trixbox_ce_endpoint_devicemap_rce TrixBox CE endpoint_devicemap.php Authenticated Command Execution metasploit exploit, excellent rank, 2020-04-28
- github.com https://github.com/rapid7/metasploit-framework/pull/13353 referenced PoC, tagged "exploit" by a source, unverified
- packetstormsecurity.com http://packetstormsecurity.com/files/157565/TrixBox-CE-2.8.0.4-Command-Execution.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N |
| NVD | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.0 | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Affected products
- Fonality Trixbox Community Edition
Classification
- Weakness
-
- CWE-78 Improper Neutralization of Special Elements used in an OS Command
References
-
github.com
/rapid7/metasploit-framework/pull/13353
exploit, issue-tracking, patch, third-party-advisory
-
packetstormsecurity.com
/files/157565/TrixBox-CE-2.8.0.4-Command-Execution.html
exploit, third-party-advisory
Sources
- CVE List CVE-2020-7351
- NVD CVE-2020-7351
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.