What’s Vulnerable › Vulnerabilities

CVE-2021-31584

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-04-23 · updated 2026-06-17
• Weakness: CWE-352

Description

Sipwise C5 NGCP www_csc version 3.6.4 up to and including platform NGCP CE mr3.8.13 allows call/click2dial CSRF attacks for actions with administrative privileges.

Affected products

• Sipwise Next Generation Communication Platform: 3.6.4

References

• http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/2021-September/014708.html
• http://packetstormsecurity.com/files/162318/Sipwise-C5-NGCP-CSC-Cross-Site-Request-Forgery.html
• https://www.sipwise.com
• https://www.zeroscience.mk/en/vulnerabilities
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5649.php
• http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/2021-September/014708.html
• http://packetstormsecurity.com/files/162318/Sipwise-C5-NGCP-CSC-Cross-Site-Request-Forgery.html
• https://www.sipwise.com
• https://www.zeroscience.mk/en/vulnerabilities
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5649.php

Get alerted when CVE-2021-31584 or the next vulnerability affects your stack