ALERT MOH Vulnerability in FreePBX

[kenn10]

Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module

Summary The FreePBX Music on Hold (MoH) module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreePBX administrator account is required. Common...

community.freepbx.org

Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module

### Summary The FreePBX Music on Hold (MoH) module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk ...

github.com

 

[wardmundy]

The Hits Keep Comin'

 

[kenn10]

The FreeSwitch products like FS PBX and FusionPBX just keep looking better and better.

 

[wardmundy]

I actually feel sorry for all the FreePBX folks that have never heard of a firewall and leave their web portal open to the internet.