Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-26499

An SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to send arbitrary requests (such as GET) to interfaces such as localhost by using the Identity header. This is fixed in 16.25.2, 18.11.2, and 19.3.2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.9%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 6.4
Products affected by CVE-2022-26499
  • Digium » Asterisk » Version: 16.15.0
    cpe:2.3:a:digium:asterisk:16.15.0
  • Digium » Asterisk » Version: 16.15.1
    cpe:2.3:a:digium:asterisk:16.15.1
  • Digium » Asterisk » Version: 16.16.1
    cpe:2.3:a:digium:asterisk:16.16.1
  • Digium » Asterisk » Version: 16.16.2
    cpe:2.3:a:digium:asterisk:16.16.2
  • Digium » Asterisk » Version: 16.17.0
    cpe:2.3:a:digium:asterisk:16.17.0
  • Digium » Asterisk » Version: 16.18.0
    cpe:2.3:a:digium:asterisk:16.18.0
  • Digium » Asterisk » Version: 16.19.0
    cpe:2.3:a:digium:asterisk:16.19.0
  • Digium » Asterisk » Version: 16.19.1
    cpe:2.3:a:digium:asterisk:16.19.1
  • Digium » Asterisk » Version: 16.20.0
    cpe:2.3:a:digium:asterisk:16.20.0
  • Digium » Asterisk » Version: 16.21.0
    cpe:2.3:a:digium:asterisk:16.21.0
  • Digium » Asterisk » Version: 16.22.0
    cpe:2.3:a:digium:asterisk:16.22.0
  • Digium » Asterisk » Version: 16.23.0
    cpe:2.3:a:digium:asterisk:16.23.0
  • Digium » Asterisk » Version: 16.24.0
    cpe:2.3:a:digium:asterisk:16.24.0
  • Digium » Asterisk » Version: 16.25.0
    cpe:2.3:a:digium:asterisk:16.25.0
  • Digium » Asterisk » Version: 18.0
    cpe:2.3:a:digium:asterisk:18.0
  • Digium » Asterisk » Version: 18.0.0
    cpe:2.3:a:digium:asterisk:18.0.0
  • Digium » Asterisk » Version: 18.0.1
    cpe:2.3:a:digium:asterisk:18.0.1
  • Digium » Asterisk » Version: 18.1.0
    cpe:2.3:a:digium:asterisk:18.1.0
  • Digium » Asterisk » Version: 18.1.1
    cpe:2.3:a:digium:asterisk:18.1.1
  • Digium » Asterisk » Version: 18.2.0
    cpe:2.3:a:digium:asterisk:18.2.0
  • Digium » Asterisk » Version: 18.2.1
    cpe:2.3:a:digium:asterisk:18.2.1
  • Digium » Asterisk » Version: 18.2.2
    cpe:2.3:a:digium:asterisk:18.2.2
  • Digium » Asterisk » Version: 18.3.0
    cpe:2.3:a:digium:asterisk:18.3.0
  • Digium » Asterisk » Version: 18.4.0
    cpe:2.3:a:digium:asterisk:18.4.0
  • Digium » Asterisk » Version: 18.5.0
    cpe:2.3:a:digium:asterisk:18.5.0
  • Digium » Asterisk » Version: 19.0.0
    cpe:2.3:a:digium:asterisk:19.0.0
  • Digium » Asterisk » Version: 19.1.0
    cpe:2.3:a:digium:asterisk:19.1.0
  • Digium » Asterisk » Version: 19.1.1
    cpe:2.3:a:digium:asterisk:19.1.1
  • Digium » Asterisk » Version: 19.2.0
    cpe:2.3:a:digium:asterisk:19.2.0
  • Digium » Asterisk » Version: 19.3.0
    cpe:2.3:a:digium:asterisk:19.3.0
  • Digium » Asterisk » Version: 19.3.1
    cpe:2.3:a:digium:asterisk:19.3.1
  • Debian » Debian Linux » Version: 10.0
    cpe:2.3:o:debian:debian_linux:10.0
  • Debian » Debian Linux » Version: 11.0
    cpe:2.3:o:debian:debian_linux:11.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved