Audiocodes Vulnérabilités

Chronologie

Taper

Not Defined	14
IP Phone Software	6

Produit

AudioCodes Device Manager Express	6
AudioCodes Mediant 500L-MSBR	4
AudioCodes Mediant 500-MBSR	4
AudioCodes Mediant M800B-MSBR	4
AudioCodes Mediant 800C-MSBR	4

Contre-mesures

Official Fix	1
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	18

Exploitabilité

High	0
Functional	0
Proof-of-Concept	1
Unproven	0
Not Defined	19

Vecteur d'accès

Not Defined	0
Physical	0
Local	0
Adjacent	7
Network	13

Authentification

Not Defined	0
High	3
Low	9
None	8

Interaction de l'utilisateur

Not Defined	0
Required	3
None	17

C3BM Index

CVSSv3 Base

≤1	0
≤2	1
≤3	1
≤4	1
≤5	3
≤6	2
≤7	6
≤8	6
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	1
≤3	1
≤4	1
≤5	3
≤6	2
≤7	7
≤8	5
≤9	0
≤10	0

VulDB

≤1	0
≤2	2
≤3	2
≤4	2
≤5	1
≤6	5
≤7	5
≤8	3
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	3
≤7	2
≤8	5
≤9	5
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	5
<2k	14
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	16
<2k	4
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (11): 405HD (3), 440HD (1), 450HD (1), 450HD IP Phone (1), Device Manager Express (6), IP Phone 420HD (2), Mediant 500-MBSR (4), Mediant 500L-MSBR (4), Mediant 800C-MSBR (4), Mediant M800B-MSBR (4), VoIP Desk Phone (3)

Publié	Base	Temp	Vulnérabilité	Prod	Exp	Con	EPSS	CTI	CVE
12/08/2023	4.7	4.7	AudioCodes VoIP Desk Phone Configuration File chiffrement faible	IP Phone Software	Not Defined	Not Defined	0.00106	0.00	CVE-2023-22956
12/08/2023	2.6	2.5	AudioCodes VoIP Desk Phone Firmware Image authentification faible	IP Phone Software	Not Defined	Not Defined	0.00042	0.00	CVE-2023-22955
12/08/2023	2.0	2.0	AudioCodes VoIP Desk Phone Backup libac_des3.so chiffrement faible	IP Phone Software	Not Defined	Not Defined	0.00095	0.00	CVE-2023-22957
30/05/2023	4.4	4.4	AudioCodes Device Manager Express ajaxTenants.php cross site scripting	Inconnue	Not Defined	Not Defined	0.00045	0.00	CVE-2022-24631
30/05/2023	4.4	4.3	AudioCodes Device Manager Express File Download BrowseFiles.php directory traversal	Inconnue	Not Defined	Not Defined	0.00047	0.00	CVE-2022-24632
30/05/2023	6.3	6.2	AudioCodes Device Manager Express POST Request BrowseFiles.php elévation de privilèges	Inconnue	Not Defined	Not Defined	0.00050	0.00	CVE-2022-24630
30/05/2023	6.7	6.6	AudioCodes Device Manager Express IPPhoneFirmwareEdit.php sql injection	Inconnue	Not Defined	Not Defined	0.00050	0.00	CVE-2022-24628
30/05/2023	7.3	7.1	AudioCodes Device Manager Express process_login.php sql injection	Inconnue	Not Defined	Not Defined	0.01423	0.02	CVE-2022-24627
30/05/2023	8.0	7.9	AudioCodes Device Manager Express File Upload BrowseFiles.php directory traversal	Inconnue	Not Defined	Not Defined	0.00208	0.02	CVE-2022-24629
20/07/2019	7.5	7.5	AudioCodes Mediant 500L-MSBR Internal Interface elévation de privilèges	Inconnue	Not Defined	Not Defined	0.00070	0.04	CVE-2019-9229

10 plus d'entrées ne sont pas affichées

🔒 Login Required

You need to signup and login to see more of the remaining 10 results.

◂ PrécédentAperçuSuivant ▸

Might our Artificial Intelligence support you?

Check our Alexa App!