Lucene search
HistoryMay 29, 2023 - 9:15 p.m.
CVE-2022-24627
audiocodes
device manager express
sql injection
unauthenticated
cve-2022-24627
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.019 Low
EPSS
Percentile
88.5%
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the process_login.php login form.
Affected configurations
Node
audiocodesdevice_manager_expressRange≤7.8.20002.47752
References
Related
cve
cve
CVE-2022-24627
2023-05-29 21:15:09
nuclei
nuclei
AudioCodes Device Manager Express - SQL Injection
2023-06-12 00:40:38
prion
prion
Sql injection
2023-05-29 21:15:00
cvelist
cvelist
CVE-2022-24627
2023-05-29 00:00:00
packetstorm
packetstorm
zdt
zdt
exploitdb
exploitdb
Device Manager Express 7.8.20002.47752 - Remote Code Execution (RCE)
2023-03-30 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.019 Low
EPSS
Percentile
88.5%
Related for NVD:CVE-2022-24627