Lucene search
MitreCVE-2023-22956HistoryAug 11, 2023 - 8:15 p.m.
CVE-2023-22956
2023-08-1120:15:14
CWE-798
mitre
web.nvd.nist.gov
20
audiocodes
voip
desk phones
cve-2023-22956
security
encryption
vulnerability
nvd
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.004
Percentile
73.6%
An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt encrypted configuration files and retrieve sensitive information.
Affected configurations
Node
audiocodesc470hd_firmwareRange≤3.4.4.1000
audiocodesc470hdMatch-
Node
audiocodesc455hd_firmwareRange≤3.4.4.1000
audiocodesc455hdMatch-
Node
audiocodesc435hd_firmwareRange≤3.4.4.1000
audiocodesc435hdMatch-
Node
audiocodes445hd_firmwareRange≤3.4.4.1000
audiocodes445hdMatch-
Node
audiocodes405hd_firmwareRange≤3.4.4.1000
audiocodes405hdMatch-
Node
audiocodesc450hd_firmwareRange≤3.4.4.1000
audiocodesc450hdMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| audiocodes | c470hd_firmware | * | cpe:2.3:o:audiocodes:c470hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | c470hd | - | cpe:2.3:h:audiocodes:c470hd:-:*:*:*:*:*:*:* |
| audiocodes | c455hd_firmware | * | cpe:2.3:o:audiocodes:c455hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | c455hd | - | cpe:2.3:h:audiocodes:c455hd:-:*:*:*:*:*:*:* |
| audiocodes | c435hd_firmware | * | cpe:2.3:o:audiocodes:c435hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | c435hd | - | cpe:2.3:h:audiocodes:c435hd:-:*:*:*:*:*:*:* |
| audiocodes | 445hd_firmware | * | cpe:2.3:o:audiocodes:445hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | 445hd | - | cpe:2.3:h:audiocodes:445hd:-:*:*:*:*:*:*:* |
| audiocodes | 405hd_firmware | * | cpe:2.3:o:audiocodes:405hd_firmware:*:*:*:*:*:*:*:* |
| audiocodes | 405hd | - | cpe:2.3:h:audiocodes:405hd:-:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2023-22956
2023-08-11 20:15:14
packetstorm
packetstorm
AudioCodes VoIP Phones Hardcoded Key
2023-08-16 00:00:00
cvelist
cvelist
CVE-2023-22956
2023-08-11 00:00:00
prion
prion
Hardcoded credentials
2023-08-11 20:15:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.004
Percentile
73.6%
Related for CVE-2023-22956