Device Manager Express Security Vulnerabilities and Issues — Device Manager Express CVE List

Lucene search

AudiocodesDevice Manager Express

2 matches found

CVE•added 2023/05/29 9:15 p.m.•57 views

CVE-2022-24627

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the process_login.php login form.

9.8CVSS9.9AI score0.51085EPSS

CVE•added 2023/05/29 9:15 p.m.•49 views

CVE-2022-24629

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achieved via directory traversal in the dir parameter of the file upload functionality of BrowseFiles.php. An attacker can upload a .php file to WebAdmin/admin/AudioCodes_files/ajax/.

9.8CVSS9.7AI score0.48669EPSS