CVE-2022-24629 in Device Manager Expressinformation

Résumé

par MITRE • 30/05/2023

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achieved via directory traversal in the dir parameter of the file upload functionality of BrowseFiles.php. An attacker can upload a .php file to WebAdmin/admin/AudioCodes_files/ajax/.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Réserver

07/02/2022

Divulgation

30/05/2023

Modérer

accepté

Entrée

VDB-230156

CPE

prêt

CWE

CWE-22 (confirmé)

Exploitation

Télécharger

CVSS

9.8 (NVD)

EPSS

0.37246

KEV

non

Activités

très faible

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2022-24629
NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-24629
CVE Details	https://www.cvedetails.com/cve/CVE-2022-24629/

◂ Précédent Aperçu Suivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!