CVE-2023-22955
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. The validation of firmware images only consists of simple checksum checks for different firmware components. Thus, by knowing how to calculate and where to store the required checksums for the flasher tool, an attacker is able to store malicious firmware.
| Vendor | n/a |
| Product | n/a |
| Published | Aug 11, 2023 |
| Last Updated | Oct 10, 2024 |
Stay Ahead of the Next One
Get instant alerts for n/a n/a
Be the first to know when new unknown vulnerabilities affecting n/a n/a are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / n/a
n/a
References
syss.de: https://syss.de syss.de: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-055.txt seclists.org: http://seclists.org/fulldisclosure/2023/Aug/17 packetstormsecurity.com: http://packetstormsecurity.com/files/174214/AudioCodes-VoIP-Phones-Insufficient-Firmware-Validation.html