CVE-2024-52884

Name of the Vulnerable Software and Affected Versions AudioCodes Mediant Session Border Controller (SBC) versions prior to 7.40A.501.841

Description An issue was discovered due to the use of weak password obfuscation/encryption. An attacker with access to configuration exports (INI) is able to decrypt the passwords.

Recommendations For versions prior to 7.40A.501.841, update to version 7.40A.501.841 or later to resolve the issue. As a temporary workaround, consider restricting access to configuration exports (INI) to minimize the risk of exploitation.