What’s Vulnerable › Vulnerabilities

CVE-2021-45310

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-02-14 · updated 2026-06-17
• Weakness: CWE-200

Description

Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to an improper access restriction. Users information such as first name, last name, acount id, server uuid, email address, profile image, number, timestamps, etc can be extracted by sending an unauthenticated HTTP GET request to the https://Switchvox-IP/main?cmd=invalid_browser.

Affected products

• Sangoma Switchvox SMB Edition: 102409

References

• https://github.com/IthacaLabs/Sangoma/tree/main/Switchvox_Version%20102409
• https://github.com/IthacaLabs/Sangoma/tree/main/Switchvox_Version%20102409

Get alerted when CVE-2021-45310 or the next vulnerability affects your stack