CVE-2022-24628

2023-05-2900:00:00

mitre

www.cve.org

cve-2022-24628

audiocodes

device manager express

sql injection

authentication bypass

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is authenticated SQL injection in the id parameter of IPPhoneFirmwareEdit.php.

References

seclists.org/fulldisclosure/2023/Feb/12