VULNERABILITY INTELLIGENCE
CVE-2007-6424
CVSS score4.3 MEDIUM
EPSS probability2.47%
CISA KEVNot currently listed
Published2007-12-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of commands from a remote web site without sufficiently validating the origin of the commands, which allows remote attackers to disable trixbox and execute arbitrary commands via a DNS spoofing attack.