CVE-2020-37153Disclosure(inextrix / astpp)

LOWCVSS 7.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, and potentially execute arbitrary code with root permissions through cron task manipulation.

inextrix CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.exploit-db.com/exploits/47889

Vendor / third-party advisories

https://www.vulncheck.com/advisories/astpp-voip-remote-code-execution

Other references

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

astpp

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-02-11); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

inextrix

Products

astpp

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CVEFind.com@CveFindCom232d
Disclosure
[CVE-2020-37153: CRITICAL] ASTPP 4.0.1 has critical security vulnerabilities like cross-site scripting and command injection. Exploiting these flaws could lead to system hijacking and code execution with roo...#cve,CVE-2020-37153,#cybersecurity https://cvefind.com/CVE-2020-37153
Post summary
The tweet announces CVE‑2020‑37153 in ASTPP 4.0.1, describing it as a critical issue involving XSS and command injection, without providing PoC, exploit code, patch, or evidence of active exploitation.
0000070
578 followersView on X
CVE@CVEnew239d
Disclosure
CVE-2020-37153 ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attac… https://www.cve.org/CVERecord?id=CVE-2020-37153
Post summary
The CVE-2020-37153 vulnerability in ASTPP 4.0.1 includes cross‑site scripting and command injection flaws in SIP device configuration and plugin management interfaces, with no PoC, exploit, patch, or active exploitation reported.
00000110
56.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	inextrix	astpp	4.0.1	-	-

Explore more

Back to dashboard inextrix CVEs astpp vulnerabilities