CVE-2023-22956

Name of the Vulnerable Software and Affected Versions AudioCodes VoIP desk phones versions through 3.4.4.1000

Description An issue was discovered due to the use of a hard-coded cryptographic key, allowing an attacker to decrypt encrypted configuration files and retrieve sensitive information.

Recommendations For versions through 3.4.4.1000, consider disabling the use of encrypted configuration files until a patch is available, and restrict access to sensitive information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.