Critical Freeswitch Vulnerability

[nysolutions]

I worked on 7 FusionPBX systems hacked using this Vulnerability over the past week, make sure to update and create firewall rules to block.

NVD - Home

nvd.nist.gov

This hack is even even you have SSH and Web ports blocked, this hack uses regular sip protocol.

 

[rastrerus]

I worked on 7 FusionPBX systems hacked using this Vulnerability over the past week, make sure to update and create firewall rules to block.

NVD - Home

nvd.nist.gov

This hack is even even you have SSH and Web ports blocked, this hack uses regular sip protocol.

3 months ago Freeswitch released the 1.11.3 version with the patch applied. I recommend you subscribe to Freeswitch releases/security on Github

 

[markjcrane]

This is a good reminder for people to upgrade to FreeSWITCH to 1.11.3. If you are using FreeSWITCH you need to be using 1.11.3. Because of the risk with AI being able to find vulnerabilities its a good idea to use the latest FreeSWITCH releases. This is a good rule for all software right now including PHP and Debian.

For Debian updates use this often on your servers.

apt update
apt upgrade