CVE-2024-58294
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-11

Last updated on: 2025-12-15

Assigner: VulnCheck

Description
FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to establish remote shell access.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-11
Last Modified
2025-12-15
Generated
2026-06-16
AI Q&A
2025-12-12
EPSS Evaluated
2026-06-14
NVD
CVE-2024-58294
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
sangoma freepbx 16.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in FreePBX 16's API module, where an authenticated attacker with valid session credentials can exploit the 'generatedocs' endpoint by sending malicious POST requests containing bash command injections. This allows the attacker to execute arbitrary commands remotely, potentially gaining remote shell access.

Impact Analysis

The vulnerability can lead to remote code execution by an attacker who has valid credentials, allowing them to run arbitrary commands on the affected system. This can result in unauthorized control over the system, data compromise, service disruption, or further attacks within the network.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-58294. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart