AudioCodes 440HD / 450HD IP Phone 3.1.2.89 Man-In-The-Middle

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2018-026 Product: 440HD / 450HD IP Phone Manufacturer: AudioCodes Affected Versions: = 3.1.2.89 Tested Versions: VC3.1.1.43.1, VC3.1.2.89 Vulnerability Type: X.509 validation - Man-in-the-Middle CWE-300 Risk Level: Medium Solution...

CVE-2018-18567: Improper Certificate Validation

AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business...

PT-2018-14521

Name of the Vulnerable Software and Affected Versions AudioCodes 440HD and 450HD devices version 3.1.2.89 and earlier Description The issue allows man-in-the-middle attackers to obtain sensitive credential information by leveraging the failure to validate X.509 certificates when used with an...