4.0.2
CVE-2020-37153 describes a Remote Code Execution (RCE) vulnerability discovered in ASTPP versions 4.0.1–4.0.1. This flaw allows attackers to inject system commands and potentially execute arbitrary code with root privileges, compromising the entire system. The vulnerability stems from command injection and cross-site scripting flaws within the SIP device configuration and plugin management interfaces. A fix is available, and immediate action is recommended.
The impact of CVE-2020-37153 is severe. Successful exploitation allows an attacker to gain root access to the ASTPP server, effectively granting them complete control over the system. This can lead to data breaches, system disruption, and the installation of malicious software. The ability to manipulate cron tasks further amplifies the risk, enabling persistent access and automated malicious activities. The combination of command injection and cross-site scripting provides multiple attack vectors, increasing the likelihood of exploitation. Compromise of the ASTPP server could also lead to lateral movement within the network, impacting other connected systems.
CVE-2020-37153 was published on 2026-02-11. The vulnerability's severity is CRITICAL (CVSS 9.8). Public proof-of-concept exploits are likely to emerge given the ease of command injection. The potential for root access makes this a high-priority vulnerability for remediation. No KEV listing or confirmed exploitation reports are currently available.
Exploit Status
EPSS
0.15% (35% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2020-37153 is to upgrade ASTPP to a patched version as soon as possible. If an immediate upgrade is not feasible due to compatibility concerns or system downtime requirements, consider implementing temporary workarounds. Restrict access to the SIP device configuration and plugin management interfaces to trusted users only. Implement strict input validation on all user-supplied data to prevent command injection. Monitor system logs for suspicious activity, particularly related to cron tasks and SIP device configuration changes. Consider deploying a Web Application Firewall (WAF) with rules to detect and block malicious requests targeting these interfaces.
Update ASTPP to a version later than 4.0.1 that addresses the Cross-Site Scripting (XSS) and command injection vulnerabilities. Refer to the official ASTPP website for the latest version and upgrade instructions.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2020-37153 is a critical Remote Code Execution vulnerability in ASTPP versions 4.0.1–4.0.1, allowing attackers to execute arbitrary code with root privileges through SIP device configuration and plugin management interfaces.
If you are running ASTPP version 4.0.1, you are affected by this vulnerability. Upgrade to a patched version as soon as possible.
The recommended fix is to upgrade ASTPP to a patched version. If immediate upgrade is not possible, restrict access and implement input validation as temporary mitigations.
While no confirmed exploitation reports are currently available, the vulnerability's severity and ease of exploitation suggest active exploitation is possible.
Refer to the ASTPP project website or security mailing lists for the official advisory and patch information.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.