Audiocodes Vulnerabilidad

Cronología

Escribe

Not Defined	14
IP Phone Software	6

Producto

AudioCodes Device Manager Express	6
AudioCodes Mediant 500L-MSBR	4
AudioCodes Mediant 500-MBSR	4
AudioCodes Mediant M800B-MSBR	4
AudioCodes Mediant 800C-MSBR	4

Contramedidas

Official Fix	1
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	18

Explotabilidad

High	0
Functional	0
Proof-of-Concept	1
Unproven	0
Not Defined	19

Vector de acceso

Not Defined	0
Physical	0
Local	0
Adjacent	7
Network	13

Autenticación

Not Defined	0
High	3
Low	9
None	8

La interacción del usuario

Not Defined	0
Required	3
None	17

C3BM Index

CVSSv3 Base

≤1	0
≤2	1
≤3	1
≤4	1
≤5	3
≤6	2
≤7	6
≤8	6
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	1
≤3	1
≤4	1
≤5	3
≤6	2
≤7	7
≤8	5
≤9	0
≤10	0

VulDB

≤1	0
≤2	2
≤3	2
≤4	2
≤5	1
≤6	5
≤7	5
≤8	3
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	3
≤7	2
≤8	5
≤9	5
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	5
<2k	14
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	18
<2k	2
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (11): 405HD (3), 440HD (1), 450HD (1), 450HD IP Phone (1), Device Manager Express (6), IP Phone 420HD (2), Mediant 500-MBSR (4), Mediant 500L-MSBR (4), Mediant 800C-MSBR (4), Mediant M800B-MSBR (4), VoIP Desk Phone (3)

Fecha de publicación	Base	Temp	Vulnerabilidad	Prod	Exp	Con	EPSS	CTI	CVE
2023-08-12	4.7	4.7	AudioCodes VoIP Desk Phone Configuration File cifrado débil	IP Phone Software	Not Defined	Not Defined	0.00106	0.00	CVE-2023-22956
2023-08-12	2.6	2.5	AudioCodes VoIP Desk Phone Firmware Image autenticación débil	IP Phone Software	Not Defined	Not Defined	0.00042	0.00	CVE-2023-22955
2023-08-12	2.0	2.0	AudioCodes VoIP Desk Phone Backup libac_des3.so cifrado débil	IP Phone Software	Not Defined	Not Defined	0.00095	0.00	CVE-2023-22957
2023-05-30	4.4	4.4	AudioCodes Device Manager Express ajaxTenants.php cross site scripting	Desconocido	Not Defined	Not Defined	0.00045	0.00	CVE-2022-24631
2023-05-30	4.4	4.3	AudioCodes Device Manager Express File Download BrowseFiles.php directory traversal	Desconocido	Not Defined	Not Defined	0.00047	0.00	CVE-2022-24632
2023-05-30	6.3	6.2	AudioCodes Device Manager Express POST Request BrowseFiles.php escalada de privilegios	Desconocido	Not Defined	Not Defined	0.00050	0.00	CVE-2022-24630
2023-05-30	6.7	6.6	AudioCodes Device Manager Express IPPhoneFirmwareEdit.php sql injection	Desconocido	Not Defined	Not Defined	0.00050	0.00	CVE-2022-24628
2023-05-30	7.3	7.1	AudioCodes Device Manager Express process_login.php sql injection	Desconocido	Not Defined	Not Defined	0.01423	0.02	CVE-2022-24627
2023-05-30	8.0	7.9	AudioCodes Device Manager Express File Upload BrowseFiles.php directory traversal	Desconocido	Not Defined	Not Defined	0.00208	0.02	CVE-2022-24629
2019-07-20	7.5	7.5	AudioCodes Mediant 500L-MSBR Internal Interface escalada de privilegios	Desconocido	Not Defined	Not Defined	0.00070	0.04	CVE-2019-9229

10 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 10 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!