ALERT An unauthenticated remote attacker can run shell commands as the Asterisk user

[hecatae]

https://www.freepbx.org/security-vulnerability-notice-2/

Summary:

An unauthenticated remote attacker can run shell commands as the Asterisk user of any FreePBX machine with ‘Recordings’ versions between 13.0.12 and 13.0.26.

Thankful that IncrediblePBX is still based on FreePBX 12

 

[wardmundy]

... with a rock-solid firewall.