CVE-2017-14001

An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior. An OS command injection vulnerability has been identified that may allow the execution of arbitrary code on the system through the inclusion of OS commands in the URL request of the program.

• CWE-78
• CWE-78

• http://www.securityfocus.com/bid/100950Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-264-03Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/100950Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-264-03Third Party Advisory, US Government Resource

Published

Sep 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13995An Improper Authentication issue was discovered in iniNet So…
• CVE-2017-13996A Relative Path Traversal issue was discovered in LOYTEC LVI…
• CVE-2017-13997A Missing Authentication for Critical Function issue was dis…
• CVE-2017-13998An Insufficiently Protected Credentials issue was discovered…
• CVE-2017-13999A Stack-based Buffer Overflow issue was discovered in WECON …
• CVE-2017-14000An Improper Authentication issue was discovered in Ctek SkyR…
• CVE-2017-14002GE Infinia/Infinia with Hawkeye 4 medical imaging systems al…
• CVE-2017-14003An Authentication Bypass by Spoofing issue was discovered in…
• CVE-2017-14004GE GEMNet License server (EchoServer) all current versions a…
• CVE-2017-14005An Unverified Password Change issue was discovered in ProMin…
• CVE-2017-14006GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging sys…
• CVE-2017-14007An Insufficient Session Expiration issue was discovered in P…