CVE-2023-22955

Name of the Vulnerable Software and Affected Versions AudioCodes VoIP desk phones versions through 3.4.4.1000

Description An issue was discovered where the validation of firmware images only consists of simple checksum checks for different firmware components. This allows an attacker, by knowing how to calculate and where to store the required checksums for the flasher tool, to store malicious firmware.

Recommendations For versions through 3.4.4.1000, as a temporary workaround, consider restricting access to the flasher tool until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.