CVE-2020-28361

MEDIUM EPSS 61.4%

Published Nov 18, 20205y ago · Modified Jun 17, 20262w ago

5.4 CVSS 3.1

Medium

Published Nov 18, 2020 5y ago

Last Modified Jun 17, 2026 2w ago

Description

Kamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the remove_hf function in the Kamailio textops module. Particular use of remove_hf in Sippy Softswitch may allow skilled attacker having a valid credential in the system to disrupt internal call start/duration accounting mechanisms leading potentially to a loss of revenue.

CVSS Details

Base Score

5.4

Exploitability

2.8

Impact

2.5

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality Low

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

61.4% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-444

Affected Products 1

Vendor	Product	Version	Range
kamailio	kamailio	*	<5.4.0

References 2

packetstormsecurity.com https://packetstormsecurity.com/files/159030/Kamailio-5.4.0-Header-Smuggling.html

ExploitThird Party AdvisoryVDB Entry
support.sippysoft.com https://support.sippysoft.com/support/discussions/topics/3000179616

Permissions Required

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.