CVE-2019-9230
Published Jul 18, 2019An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.253. A cross-site scripting (XSS) vulne…
Vendor archive
audiocodes CVEs
Beta · best-effort33 CVEs tagged to vendor audiocodes — 5 Critical, 20 High, 8 Medium, 0 Low, 0 Unrated.
CVE-2018-16220
Published Apr 25, 2019Cross Site Scripting in different input fields (domain field and personal settings) in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an attacker (local or remote) to inj…
CVE-2018-16219
Published Apr 25, 2019A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the same network as the device) to change th…
CVE-2018-16216
Published Apr 25, 2019A command injection (missing input validation, escaping) in the monitoring or memory status web interface in AudioCodes 405HD (firmware 2.2.12) VoIP phone allows an authenticated…
CVE-2018-5757
Published Apr 1, 2019An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functionality, which uses a parameter in a request to command.cgi…
CVE-2018-10093
Published Mar 21, 2019AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.
CVE-2018-10091
Published Mar 21, 2019AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow XSS.
CVE-2018-18567
Published Oct 24, 2018AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certi…
Showing 26-33 of 33 CVEsPage 2 of 2