3cx Phone System Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names 3cx Phone System Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2019-9971 — CVSS 8.8 (high): PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo…
• CVE-2019-9972 — CVSS 8.8 (high): PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands…