CVE-2023-22957

The CVE-2023-22957 issue affects AudioCodes VoIP desk phones (libac_des3.so) through firmware up to 3.4.4.1000. The root cause is a hard-coded cryptographic key, enabling an attacker with access to backups or configuration files to decrypt encrypted values and retrieve sensitive information (e.g....

CVE-2023-22956

CVE-2023-22956 – AudioCodes VoIP desk phones are affected up to firmware 3.4.4.1000. The root cause is the use of a hard-coded cryptographic key, enabling an attacker to decrypt encrypted configuration files and retrieve sensitive information. Evidence from multiple sources confirms the issue and...