Lucene search
HistoryAug 11, 2023 - 8:15 p.m.
CVE-2023-22956
audiocodes
voip
vulnerability
cryptographic key
decryption
sensitive information
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.004
Percentile
73.6%
An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt encrypted configuration files and retrieve sensitive information.
Affected configurations
Node
audiocodesc470hd_firmwareRange≤3.4.4.1000
audiocodesc470hdMatch-
Node
audiocodesc455hd_firmwareRange≤3.4.4.1000
audiocodesc455hdMatch-
Node
audiocodesc435hd_firmwareRange≤3.4.4.1000
audiocodesc435hdMatch-
Node
audiocodes445hd_firmwareRange≤3.4.4.1000
audiocodes445hdMatch-
Node
audiocodes405hd_firmwareRange≤3.4.4.1000
audiocodes405hdMatch-
Node
audiocodesc450hd_firmwareRange≤3.4.4.1000
audiocodesc450hdMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| audiocodes | c470hd_firmware | * | cpe:2.3:o:audiocodes:c470hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | c470hd | - | cpe:2.3:h:audiocodes:c470hd:-:*:*:*:*:*:*:* |
| audiocodes | c455hd_firmware | * | cpe:2.3:o:audiocodes:c455hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | c455hd | - | cpe:2.3:h:audiocodes:c455hd:-:*:*:*:*:*:*:* |
| audiocodes | c435hd_firmware | * | cpe:2.3:o:audiocodes:c435hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | c435hd | - | cpe:2.3:h:audiocodes:c435hd:-:*:*:*:*:*:*:* |
| audiocodes | 445hd_firmware | * | cpe:2.3:o:audiocodes:445hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | 445hd | - | cpe:2.3:h:audiocodes:445hd:-:*:*:*:*:*:*:* |
| audiocodes | 405hd_firmware | * | cpe:2.3:o:audiocodes:405hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | 405hd | - | cpe:2.3:h:audiocodes:405hd:-:*:*:*:*:*:*:* |
Related
packetstorm
packetstorm
AudioCodes VoIP Phones Hardcoded Key
2023-08-16 00:00:00
cvelist
cvelist
CVE-2023-22956
2023-08-11 00:00:00
prion
prion
Hardcoded credentials
2023-08-11 20:15:00
cve
cve
CVE-2023-22956
2023-08-11 20:15:14
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.004
Percentile
73.6%
Related for NVD:CVE-2023-22956