Read the docs

Akuvox

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Akuvox records in CISA KEV

No Akuvox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
E11 Firmware 13 records MEDIUM Sp-r50p Firmware 3 records MEDIUM C313w-2 Firmware 2 records HIGH Nc-2 Firmware 2 records HIGH Ns-2 Firmware 2 records HIGH Nx-2 Firmware 2 records HIGH R20a-2 Firmware 2 records HIGH R20k-2 Firmware 2 records HIGH

Records

3 records in Sp-r50p Firmware · all components

TI-2019-09191 CVE-2019-12326 · GHSA-w353-q44q-75p3

Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP…

Priority MEDIUM 47

Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a manipulated ringtone file, with an executable payload (shell commands within the fi…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02985 Published 2019-07-22 No fix listed CWE-434
TI-2019-09189 CVE-2019-12324 · GHSA-fvrw-43j5-v43w

A command injection (missing input validation) issue in the IP address field for the…

Priority LOW 39

A command injection (missing input validation) issue in the IP address field for the logging server in the configuration web interface on the Akuvox R50P VoIP phone with firmware 50.0.6.156 allows an authenticated remote…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.04343 Published 2019-07-22 No fix listed CWE-78
Open these records in search →