CVE-2023-22957
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
72.1%
An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root password.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| audiocodes | c470hd | - | cpe:2.3:h:audiocodes:c470hd:-:*:*:*:*:*:*:* |
| audiocodes | c470hd_firmware | * | cpe:2.3:o:audiocodes:c470hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | c455hd | - | cpe:2.3:h:audiocodes:c455hd:-:*:*:*:*:*:*:* |
| audiocodes | c455hd_firmware | * | cpe:2.3:o:audiocodes:c455hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | c435hd | - | cpe:2.3:h:audiocodes:c435hd:-:*:*:*:*:*:*:* |
| audiocodes | c435hd_firmware | * | cpe:2.3:o:audiocodes:c435hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | 445hd | - | cpe:2.3:h:audiocodes:445hd:-:*:*:*:*:*:*:* |
| audiocodes | 445hd_firmware | * | cpe:2.3:o:audiocodes:445hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | 405hd | - | cpe:2.3:h:audiocodes:405hd:-:*:*:*:*:*:*:* |
| audiocodes | 405hd_firmware | * | cpe:2.3:o:audiocodes:405hd_firmware:*:*:*:*:*:*:*:* |
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
72.1%