CVE-2025-57433

The 2wcom IP-4c audio codec device (version 2.15.5 ) contains an information disclosure vulnerability in its web interface. An authenticated attacker, including those with low-privileged guest accounts , can perform a crafted POST request to the /cwi/ajax_request/get_data.php endpoint to retrieve...

CVE-2025-57438

The 2wcom IP-4c audio codec device, specifically version 2.15.5 , is vulnerable to a Broken Access Control issue. The vulnerability allows a user with manager-level privileges to bypass intended security restrictions on sensitive endpoints by intercepting and modifying requests . While these endp...