[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSASoEqRqLBy9Cyypv0kpQWQC9fIKCBeb6ObeIS-DTJk":3,"g5a-ex:asterisk\u002Fasterisk_business_edition@*":186,"g5a-family:asterisk\u002Fasterisk_business_edition":188},{"success":4,"data":5},true,{"product":6,"versions":76,"topVulnerabilitiesByEpss":104,"kevVulnerabilities":163,"seoMetadata":164,"meta":183},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":75},"asterisk","asterisk_business_edition",27,11,0,"2009-01-14",[14,18,21,24,26,28,30,32,34,36,39,42,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"a",4,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"b",1,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"b.1.3.2",6,{"version":25,"cve_count":23,"kev_count":11,"has_kev":17},"b.1.3.3",{"version":27,"cve_count":23,"kev_count":11,"has_kev":17},"b.2.2.0",{"version":29,"cve_count":23,"kev_count":11,"has_kev":17},"b.2.2.1",{"version":31,"cve_count":23,"kev_count":11,"has_kev":17},"b.2.3.1",{"version":33,"cve_count":23,"kev_count":11,"has_kev":17},"b.2.3.2",{"version":35,"cve_count":23,"kev_count":11,"has_kev":17},"b.2.3.3",{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},"b.2.3.4",7,{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},"b.2.3.5",2,{"version":43,"cve_count":44,"kev_count":11,"has_kev":17},"b.2.3.6",3,{"version":46,"cve_count":23,"kev_count":11,"has_kev":17},"b.2.5.0",{"version":48,"cve_count":41,"kev_count":11,"has_kev":17},"b.2.5.1",{"version":50,"cve_count":41,"kev_count":11,"has_kev":17},"b2.5.1",{"version":52,"cve_count":20,"kev_count":11,"has_kev":17},"b2.5.2",{"version":54,"cve_count":44,"kev_count":11,"has_kev":17},"b.2.5.3",{"version":56,"cve_count":20,"kev_count":11,"has_kev":17},"c",{"version":58,"cve_count":41,"kev_count":11,"has_kev":17},"c.1.0",{"version":60,"cve_count":44,"kev_count":11,"has_kev":17},"c.1.0-beta7",{"version":62,"cve_count":41,"kev_count":11,"has_kev":17},"c.1.0beta7",{"version":64,"cve_count":44,"kev_count":11,"has_kev":17},"c.1.0-beta8",{"version":66,"cve_count":41,"kev_count":11,"has_kev":17},"c.1.6",{"version":68,"cve_count":44,"kev_count":11,"has_kev":17},"c.1.6.1",{"version":70,"cve_count":41,"kev_count":11,"has_kev":17},"c.1.6.2",{"version":72,"cve_count":20,"kev_count":11,"has_kev":17},"c1.8.0",{"version":74,"cve_count":20,"kev_count":11,"has_kev":17},"c1.8.1","Asterisk Business Edition by Asterisk is a technology product with 27 tracked versions and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":23,"kev_count":11,"has_kev":17},{"version":27,"cve_count":23,"kev_count":11,"has_kev":17},{"version":29,"cve_count":23,"kev_count":11,"has_kev":17},{"version":31,"cve_count":23,"kev_count":11,"has_kev":17},{"version":33,"cve_count":23,"kev_count":11,"has_kev":17},{"version":35,"cve_count":23,"kev_count":11,"has_kev":17},{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},{"version":43,"cve_count":44,"kev_count":11,"has_kev":17},{"version":46,"cve_count":23,"kev_count":11,"has_kev":17},{"version":48,"cve_count":41,"kev_count":11,"has_kev":17},{"version":50,"cve_count":41,"kev_count":11,"has_kev":17},{"version":52,"cve_count":20,"kev_count":11,"has_kev":17},{"version":54,"cve_count":44,"kev_count":11,"has_kev":17},{"version":56,"cve_count":20,"kev_count":11,"has_kev":17},{"version":58,"cve_count":41,"kev_count":11,"has_kev":17},{"version":60,"cve_count":44,"kev_count":11,"has_kev":17},{"version":62,"cve_count":41,"kev_count":11,"has_kev":17},{"version":64,"cve_count":44,"kev_count":11,"has_kev":17},{"version":66,"cve_count":41,"kev_count":11,"has_kev":17},{"version":68,"cve_count":44,"kev_count":11,"has_kev":17},{"version":70,"cve_count":41,"kev_count":11,"has_kev":17},{"version":72,"cve_count":20,"kev_count":11,"has_kev":17},{"version":74,"cve_count":20,"kev_count":11,"has_kev":17},[105,113,120,126,132,138,143,147,153,158],{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":17,"epssScore":112},"CVE-2008-0095","The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message with an Also (Also transfer) header, which triggers a NULL pointer dereference.","2008-01-08",5,"v2","Medium",0.25423,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":110,"severity":118,"isKev":17,"epssScore":119},"CVE-2008-1289","Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote attackers to (1) write a zero to an arbitrary memory location via a large RTP payload number, related to the ast_rtp_unset_m_type function in main\u002Frtp.c; or (2) write certain integers to an arbitrary memory location via a large number of RTP payloads, related to the process_sdp function in channels\u002Fchan_sip.c.","2008-03-24",7.5,"High",0.11523,{"cveId":121,"description":122,"publishedDate":123,"cvssScore":124,"cvssVersion":110,"severity":111,"isKev":17,"epssScore":125},"CVE-2008-2119","Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.","2008-06-04",4.3,0.07273,{"cveId":127,"description":128,"publishedDate":116,"cvssScore":129,"cvssVersion":110,"severity":130,"isKev":17,"epssScore":131},"CVE-2008-1390","The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and s800i 1.0.x before 1.1.0.2 generates insufficiently random manager ID values, which makes it easier for remote attackers to hijack a manager session via a series of ID guesses.",9.3,"Critical",0.03837,{"cveId":133,"description":134,"publishedDate":135,"cvssScore":136,"cvssVersion":110,"severity":118,"isKev":17,"epssScore":137},"CVE-2008-3264","The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (traffic amplification) via an IAX2 FWDOWNL request.","2008-07-24",7.8,0.0338,{"cveId":139,"description":140,"publishedDate":141,"cvssScore":124,"cvssVersion":110,"severity":111,"isKev":17,"epssScore":142},"CVE-2008-1897","The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3, when configured to allow unauthenticated calls, does not verify that an ACK response contains a call number matching the server's reply to a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed ACK response that does not complete a 3-way handshake.  NOTE: this issue exists because of an incomplete fix for CVE-2008-1923.","2008-04-23",0.02743,{"cveId":144,"description":145,"publishedDate":12,"cvssScore":109,"cvssVersion":110,"severity":111,"isKev":17,"epssScore":146},"CVE-2009-0041","IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.",0.02715,{"cveId":148,"description":149,"publishedDate":150,"cvssScore":151,"cvssVersion":110,"severity":118,"isKev":17,"epssScore":152},"CVE-2008-1332","Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote attackers to access the SIP channel driver via a crafted From header.","2008-03-20",8.8,0.02327,{"cveId":154,"description":155,"publishedDate":156,"cvssScore":124,"cvssVersion":110,"severity":111,"isKev":17,"epssScore":157},"CVE-2008-5558","Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.","2008-12-17",0.01959,{"cveId":159,"description":160,"publishedDate":161,"cvssScore":124,"cvssVersion":110,"severity":111,"isKev":17,"epssScore":162},"CVE-2007-6430","Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations (\"realtime\") and host-based authentication, does not check the IP address when the username is correct and there is no password, which allows remote attackers to bypass authentication using a valid username.","2007-12-20",0.01951,[],{"title":165,"metaDescription":166,"keywords":167,"structuredData":168},"Asterisk Business Edition by Asterisk - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Asterisk Business Edition by Asterisk covering 27 versions with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Asterisk Business Edition vulnerabilities, Asterisk Business Edition security, Asterisk Business Edition CVE, Asterisk Asterisk Business Edition, Asterisk Business Edition threat intelligence, Asterisk security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":169,"@type":170,"name":171,"description":166,"url":172,"manufacturer":173,"applicationCategory":177,"softwareVersion":178,"mainEntity":179},"https:\u002F\u002Fschema.org","SoftwareApplication","Asterisk Business Edition","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fasterisk\u002Fasterisk_business_edition",{"@type":174,"name":175,"url":176},"Organization","Asterisk","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fasterisk","Security Software","27 versions tracked",{"@type":180,"name":181,"description":182,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Asterisk Business Edition Security Vulnerabilities","Security vulnerabilities affecting Asterisk Business Edition by Asterisk",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":184,"apiVersion":185},"2026-10-19T23:46:40.682Z","3.0",{"rows":187,"total":11,"capped":17,"failed":11},[],[]]