PT-2019-9275
CVE-2018-16219
·
تاريخ النشر
2019-04-25
·
تاريخ التحديث
2019-04-26
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
AudioCodes 405HD VoIP phone version 2.2.12
Description
A missing password verification in the web interface allows a remote attacker in the same network as the device to change the admin password without authentication via a POST request.
Recommendations
For version 2.2.12, consider restricting access to the web interface until a fix is available, and avoid using the device's admin password change functionality via the web interface to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾