AudioCodes Limited

Records33All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

AudioCodes Limited records in CISA KEV

No AudioCodes Limited vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fax Server 8 records MEDIUM Interactive Voice Response 8 records MEDIUM 405hd Firmware 6 records HIGH Device Manager Express 6 records HIGH 420hd Ip Phone Firmware 3 records HIGH 445hd Firmware 3 records HIGH C450hd Firmware 3 records HIGH One Voice Operations Center 3 records HIGH

Records

33 records

TI-2022-08462 CVE-2022-24629 · GHSA-xc6r-22gr-xppq

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

HIGH 75

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.37246 Published 2023-05-29 No fix listed CWE-22

TI-2018-07156 CVE-2018-10093 · GHSA-m7vv-wh97-xcv4

AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

HIGH 75

AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.6819 Published 2019-03-17 No fix listed CWE-862

TI-2024-35388 CVE-2024-52884 · GHSA-v6vm-3qpv-vj6x

An issue was discovered in AudioCodes Mediant Session Border Controller (SBC) before…

HIGH 72

An issue was discovered in AudioCodes Mediant Session Border Controller (SBC) before 7.40A.501.841.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00156 Published 2025-02-07 No fix listed CWE-327

TI-2024-35387 CVE-2024-52883 · GHSA-q9w8-xpx6-pvc2

An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582.

HIGH 72

An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00662 Published 2025-02-07 No fix listed CWE-22

TI-2024-35385 CVE-2024-52881 · GHSA-9m28-7q5q-gch7

An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582.

HIGH 72

An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00358 Published 2025-02-07 No fix listed CWE-321

TI-2023-09087 CVE-2023-22957 · GHSA-6v2p-6369-885j

An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through…

HIGH 72

An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01357 Published 2023-08-11 No fix listed CWE-798

TI-2023-09086 CVE-2023-22956 · GHSA-cr2c-25fm-qvrf

An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000.

HIGH 72

An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01357 Published 2023-08-11 No fix listed CWE-798

TI-2022-08460 CVE-2022-24627 · GHSA-v6q9-3q27-xxg6

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

HIGH 71

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.26389 Published 2023-05-29 No fix listed CWE-89

TI-2023-09085 CVE-2023-22955 · GHSA-xjqg-wxv8-wvg6

An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000.

HIGH 69

An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00309 Published 2023-08-11 No fix listed CWE-345

TI-2024-35386 CVE-2024-52882 · GHSA-45ph-87rf-q9mf

An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582.

MEDIUM 60

An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00235 Published 2025-02-07 No fix listed CWE-79

TI-2022-08463 CVE-2022-24630 · GHSA-q38v-gvjv-m5cj

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

MEDIUM 54

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.23895 Published 2023-05-29 No fix listed CWE-77

TI-2022-08465 CVE-2022-24632 · GHSA-wgw4-77r7-7jf4

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

MEDIUM 52

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.27177 Published 2023-05-29 No fix listed CWE-22

TI-2022-08464 CVE-2022-24631 · GHSA-4vrm-mqx2-h64f

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

MEDIUM 52

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.41375 Published 2023-05-29 No fix listed CWE-79

TI-2025-23207 CVE-2025-32106 · GHSA-hx7r-89vp-x3gj

In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may…

MEDIUM 51

In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result in an unauthenticated remote user's ability to execute unauthorized code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01038 Published 2025-06-03 No fix listed CWE-94

TI-2025-24458 CVE-2025-34329 · GHSA-x988-43fg-2vcq

AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Backup Upload RCE via ajaxBackupUploadFile.php

MEDIUM 50

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthenticated backup upload endpoint at AudioCodes_files/ajaxBackupUploadFile.php in the F2MAdmin web interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01193 Published 2025-11-19 No fix listed CWE-434

TI-2025-24457 CVE-2025-34328 · GHSA-8fgf-qm9f-cm9j

AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated File Upload RCE via ajaxScript.php

MEDIUM 49

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated script-management endpoint at AudioCodes_files…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00762 Published 2025-11-19 No fix listed CWE-434

TI-2018-04163 CVE-2018-5757 · GHSA-p8fp-8747-qj72

An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106.

MEDIUM 48

An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.07638 Published 2019-04-01 No fix listed CWE-78

TI-2025-24463 CVE-2025-34334 · GHSA-8fqr-64hx-fpfp

AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via TestFax.php & LPE

MEDIUM 46

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 are vulnerable to an authenticated command injection in the fax test functionality implemented by AudioCodes_files/TestFax.php.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03436 Published 2025-11-19 No fix listed CWE-78

TI-2025-24464 CVE-2025-34335 · GHSA-38qx-8m29-gqjv

AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via ActivateLicense.php

MEDIUM 45

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenticated command injection vulnerability in the license activation workflow handled by AudioCodes_files/ActivateL…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02822 Published 2025-11-19 No fix listed CWE-78

TI-2025-24460 CVE-2025-34331 · GHSA-cm6j-j6mx-7fjj

AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated File Read via download.php

MEDIUM 44

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 contain an unauthenticated file read vulnerability via the download.php script.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00567 Published 2025-11-19 No fix listed CWE-306

TI-2018-11606 CVE-2018-16216 · GHSA-rm8w-vgw5-7273

A command injection (missing input validation, escaping) in the monitoring or memory…

MEDIUM 42

A command injection (missing input validation, escaping) in the monitoring or memory status web interface in AudioCodes 405HD (firmware 2.2.12) VoIP phone allows an authenticated remote attacker in the same network as th…

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.04081 Published 2019-04-25 No fix listed CWE-78

TI-2018-11609 CVE-2018-16219 · GHSA-2chr-ggjw-hv3v

A missing password verification in the web interface in AudioCodes 405HD VoIP phone with…

MEDIUM 40

A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the same network as the device) to change the admin password without authentication v…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01216 Published 2019-04-25 No fix listed CWE-287

TI-2019-06686 CVE-2019-9231 · GHSA-3q2f-m5vm-7r8q

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and…

LOW 39

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00744 Published 2019-07-18 No fix listed CWE-352

TI-2019-06684 CVE-2019-9229 · GHSA-2h52-m7f3-9vxw

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and…

LOW 39

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00606 Published 2019-07-19 No fix listed CWE-798

TI-2025-24462 CVE-2025-34333 · GHSA-g2p2-cfv2-vc48

AudioCodes Fax/IVR Appliance <= 2.6.23 World-Writable Webroot LPE

LOW 38

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 configure the web document root at C:\\F2MAdmin\\F2E with overly permissive file system permissions.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00218 Published 2025-11-19 No fix listed CWE-276

Open these records in search →