Cross-Site Scripting Vulnerability in Multiple AudioCodes Products

AudioCodes Mediant 500L-MSBR and so on are products of AudioCodes Israel.AudioCodes Mediant 500L-MSBR is a 500L series all-in-one SOHO/SMB router.AudioCodes Mediant 500-MSBR is a 500 The AudioCodes Mediant 500-MSBR is a 500L series all-in-one SOHO/SMB router. A cross-site scripting vulnerability...

CVE-2019-9228

The CVE-2019-9228 issue affects AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR, and 800C-MSBR devices with firmware versions F7.20A up to 7.20A.252.062. The vulnerability is in the (1) management SSH and (2) management TELNET features, where remote attackers can cause a denial of service by e...

CVE-2019-9228: Undefined Security Weakness

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The 1 management SSH and 2 management TELNET features allow remote attackers to cause a denial of service connection slot exhaustion via 5...

CVE-2019-9229: Use of Hard-coded Credentials

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local address 169.254.254.253 allows attackers in the local network to access multiple quagga VTYs. Attackers...

CVE-2019-9231: Cross-Site Request Forgery (CSRF)

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cross-Site Request Forgery CSRF vulnerability in the management web interface allows remote attackers to execute malicious and unauthorized actions,...