CVE-2023-22955

An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. The validation of firmware images only consists of simple checksum checks for different firmware components. Thus, by knowing how to calculate and where to store the required checksums for the flasher tool, an attacker is...

CVE-2023-22955

AudioCodes VoIP desk phones up to version 3.4.4.1000 are affected. The vulnerability stems from firmware-image validation that uses only simple checksums, enabling an attacker who can influence the flasher tool to inject malicious firmware. Root cause: insufficient validation allowing firmware ta...

CVE-2023-22956

An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt encrypted configuration files and retrieve sensitive information...

PT-2023-18796 · Audiocodes · Audiocodes Voip Desk Phones

Name of the Vulnerable Software and Affected Versions: AudioCodes VoIP desk phones versions through 3.4.4.1000 Description: An issue was discovered where the validation of firmware images only consists of simple checksum checks for different firmware components. This allows an attacker, by knowin...

CVE-2023-22956

CVE-2023-22956 – AudioCodes VoIP desk phones are affected up to firmware 3.4.4.1000. The root cause is the use of a hard-coded cryptographic key, enabling an attacker to decrypt encrypted configuration files and retrieve sensitive information. Evidence from multiple sources confirms the issue and...

CVE-2023-22957

The CVE-2023-22957 issue affects AudioCodes VoIP desk phones (libac_des3.so) through firmware up to 3.4.4.1000. The root cause is a hard-coded cryptographic key, enabling an attacker with access to backups or configuration files to decrypt encrypted values and retrieve sensitive information (e.g....

CVE-2023-22957

An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...

AudioCodes VoIP Trust Management Issues Vulnerability

AudioCodes VoIP is a series of desk phones from the Israeli company AudioCodes. A security vulnerability exists in AudioCodes VoIP desk phones version 3.4.4.1000 and earlier versions, which stems from the use of hard-coded keys in libacdes3.so...

Information Disclosure

gitlab is vulnerable to Information Disclosure. An attacker could exploit this vulnerability to obtain the service desk email address for a GitLab project. This could then be used to contact the service desk impersonating a project member, or to send phishing emails to project members. This could...

Cannot Add Store to Workspace App, Errors "Your Apps are not available at this time."

Cannot add store to workspace app Your Apps are not available at this time. Please try again in a few Minutes or contact your help desk with this information: Cannot Contact Store...

Authorization Bypass

gitlab is vulnerable to Authorization Bypass. The vulnerability exists due to the improper access control in the library, which allows project non-members to retrieve the service desk email address...

CVE-2021-35391

Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL...

CVE-2021-35391

Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL...

CVE-2021-35391

Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL...

Server side request forgery (ssrf)

Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL...

PT-2023-12262 · Unknown · Deskpro Support Desk

Name of the Vulnerable Software and Affected Versions: Deskpro Support Desk version 2021.21.6 Description: A Server Side Request Forgery issue allows attackers to execute arbitrary code via a crafted URL. Recommendations: For Deskpro Support Desk version 2021.21.6, update to a newer version that...

CVE-2021-35391

CVE-2021-35391 is an SSRF vulnerability in Deskpro Support Desk v2021.21.6 that allows an attacker to execute arbitrary code via a crafted URL. The issue is documented across multiple sources (NVD, Red Hat, PRION, CNNVD, CVE registry, and PT-2023-12262). Affected software: Deskpro Support Desk 20...

CVE-2021-35391

Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL...

CVE-2021-35391

Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL...

Deskpro 代码问题漏洞

Deskpro is a suite of helpdesk software from Deskpro UK. The software includes a customer relationship management component, among other things, and offers features such as email, live chat, and voice. A security vulnerability exists in Deskpro Support Desk version v2021.21.6. An attacker could...