[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHRUd5hqBPC3aABaf1ZON7_THscFjQ1k7viH7YEhjMIs":3,"g5a-risk:CVE-2019-18610":178},{"success":4,"data":5,"meta":176},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":60,"references":61,"referencesCount":60,"weaknesses":80,"weaknessesCount":89,"isActivelyExploited":90,"cisaInfo":26,"otxData":26,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":160,"notableEvents":161},"CVE-2019-18610","What is CVE-2019-18610?","An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated Asterisk Manager Interface (AMI) user without system authorization could use a specially crafted Originate AMI request to execute arbitrary system commands.","An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated As...","2019-11-22T18:15:11.03","2022-06-03T14:34:50.917",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C","SINGLE","COMPLETE",9,8,10,0.50076,[39,39,39,39,39,39,39],"High",[43,48,52,57],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"digium","asterisk","*","cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"certified_asterisk","13.21.0","cpe:2.3:a:digium:certified_asterisk:13.21.0:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":58,"criteria":59,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",4,[62,68,74,77],{"url":63,"source":64,"tags":65},"http:\u002F\u002Fdownloads.asterisk.org\u002Fpub\u002Fsecurity\u002FAST-2019-007.html","Asterisk",[66,67],"Patch","Vendor Advisory",{"url":69,"source":70,"tags":71},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F11\u002Fmsg00038.html","Debian",[72,73],"Mailing List","Third Party Advisory",{"url":75,"source":70,"tags":76},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F04\u002Fmsg00001.html",[72,73],{"url":78,"source":64,"tags":79},"https:\u002F\u002Fwww.asterisk.org\u002Fdownloads\u002Fsecurity-advisories",[67],[81],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-862","Missing Authorization","The product does not perform an authorization check when an actor attempts to access a resource or perform an action.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are not applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Incomplete","Class","Simple",1,false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2019-18610? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-18610, a high severity cyber security vulnerability from 2019. High exploit probability (50.1%). An issue was discovered i...","CVE-2019-18610, CVE-2019-18610 vulnerability, CVE-2019-18610 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, digium security, debian security, asterisk vulnerability, certified_asterisk vulnerability, debian_linux vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2019-18610",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-18610","Cybersecurity","CVE-2019-18610, CVE-2019-18610 vulnerability, CVE-2019-18610 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118,152],{"Operator":26,"Negate":26,"Nodes":119},[120],{"Operator":121,"Negate":26,"CPEMatch":122},"OR",[123,127,131,135,137,140,143,146,149],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":125,"VersionEndExcluding":126,"VersionEndIncluding":26},"3000F83F-4D47-4BA8-BF35-844C41BFBE18","13.0.0","13.29.2",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":129,"VersionEndExcluding":130,"VersionEndIncluding":26},"65C549ED-B864-47C9-ACD8-C695FC7DAE57","16.0.0","16.6.2",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":133,"VersionEndExcluding":134,"VersionEndIncluding":26},"43F12809-5F7E-4B99-A028-30B43BAFB5A6","17.0.0","17.0.1",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":136,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9FC7665A-FF2F-4A20-B695-96C2217D268E",{"Vulnerable":4,"Criteria":138,"MatchCriteriaID":139,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:digium:certified_asterisk:13.21.0:cert1:*:*:*:*:*:*","18C39C0A-7F81-4734-8C1D-4FFDF070F526",{"Vulnerable":4,"Criteria":141,"MatchCriteriaID":142,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:digium:certified_asterisk:13.21.0:cert2:*:*:*:*:*:*","F809DB3A-457F-4DEF-9B11-E3FCDF2D8466",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":145,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:digium:certified_asterisk:13.21.0:cert3:*:*:*:*:*:*","1F170494-F60A-42C2-A2CE-1BB5BDCC8200",{"Vulnerable":4,"Criteria":147,"MatchCriteriaID":148,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:digium:certified_asterisk:13.21.0:cert4:*:*:*:*:*:*","2A28B713-6CBB-4F4D-A54B-17758DD35EE9",{"Vulnerable":4,"Criteria":150,"MatchCriteriaID":151,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:digium:certified_asterisk:13.21.0:rc1:*:*:*:*:*:*","B7D110F5-E431-4F31-8723-494D20D9108D",{"Operator":26,"Negate":26,"Nodes":153},[154],{"Operator":121,"Negate":26,"CPEMatch":155},[156,158],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":157,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":159,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[162,169],{"id":163,"eventType":164,"eventTime":165,"details":166,"label":167,"color":168},"5205bfb3-96c1-4c65-84fc-1950b3ed4c58","HIGH_EPSS_DELTA","2025-06-11T10:11:06.058584+00:00","Daily EPSS score increased by 0.116 on 2023-12-30","EPSS Score Increased","red",{"id":170,"eventType":171,"eventTime":172,"details":173,"label":174,"color":175},"9e164a4d-f0a3-4674-b03f-4f386a9db13c","LOW_EPSS_DELTA","2026-06-16T04:06:03.872918+00:00","Daily EPSS score decreased by 0.121 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":177,"version":32},1792451238383,{"score":179,"band":180,"action":181,"scoredAt":182},55,"Medium","Plan remediation","2026-10-19T07:51:45.095866+00:00"]