CVE-2022-24630

2023-05-2900:00:00

mitre

www.cve.org

audiocodes

device manager

vulnerability

browsefiles.php

unauthorized ssh command execution

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.2%

JSON

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an ssh_command field that is executed.

References

seclists.org/fulldisclosure/2023/Feb/12