Lucene search
HistoryMay 29, 2023 - 9:15 p.m.
CVE-2022-24630
audiocodes
device manager express
ssh command execution
vulnerability
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.2%
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an ssh_command field that is executed.
Affected configurations
Node
audiocodesdevice_manager_expressRange≤7.8.20002.47752
References
Related
cve
cve
CVE-2022-24630
2023-05-29 21:15:09
prion
prion
Cross site request forgery (csrf)
2023-05-29 21:15:00
cvelist
cvelist
CVE-2022-24630
2023-05-29 00:00:00
zdt
zdt
packetstorm
packetstorm
exploitdb
exploitdb
Device Manager Express 7.8.20002.47752 - Remote Code Execution (RCE)
2023-03-30 00:00:00
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.2%
Related for NVD:CVE-2022-24630