Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

33 records

Vendor: AudioCodes Limited Clear all filters
TI-2025-24464 CVE-2025-34335 · GHSA-38qx-8m29-gqjv

AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via ActivateLicense.php

Priority MEDIUM 45

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenticated command injection vulnerability in the license activation workflow handled by AudioCodes_files/ActivateL…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02822 Published 2025-11-19 No fix listed CWE-78
TI-2025-24463 CVE-2025-34334 · GHSA-8fqr-64hx-fpfp

AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via TestFax.php & LPE

Priority MEDIUM 46

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 are vulnerable to an authenticated command injection in the fax test functionality implemented by AudioCodes_files/TestFax.php.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03436 Published 2025-11-19 No fix listed CWE-78
TI-2025-24461 CVE-2025-34332 · GHSA-x8c7-9v8r-m3jq

AudioCodes Fax/IVR Appliance <= 2.6.23 Insecure Service Control Scripts LPE

Priority LOW 38

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component that controls back-end Windows services using helper batch scripts located under C:\\F2MA…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00218 Published 2025-11-19 No fix listed CWE-276
TI-2025-24458 CVE-2025-34329 · GHSA-x988-43fg-2vcq

AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Backup Upload RCE via ajaxBackupUploadFile.php

Priority MEDIUM 50

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthenticated backup upload endpoint at AudioCodes_files/ajaxBackupUploadFile.php in the F2MAdmin web interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01193 Published 2025-11-19 No fix listed CWE-434
TI-2025-24457 CVE-2025-34328 · GHSA-8fgf-qm9f-cm9j

AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated File Upload RCE via ajaxScript.php

Priority MEDIUM 49

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated script-management endpoint at AudioCodes_files…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00762 Published 2025-11-19 No fix listed CWE-434
TI-2025-24459 CVE-2025-34330 · GHSA-xwgw-x6p5-hcp9

AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Prompt File Upload via ajaxPromptUploadFile.php

Priority LOW 37

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated prompt upload endpoint at AudioCodes_files/uti…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00494 Published 2025-11-19 No fix listed CWE-434
TI-2025-24462 CVE-2025-34333 · GHSA-g2p2-cfv2-vc48

AudioCodes Fax/IVR Appliance <= 2.6.23 World-Writable Webroot LPE

Priority LOW 38

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 configure the web document root at C:\\F2MAdmin\\F2E with overly permissive file system permissions.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00218 Published 2025-11-19 No fix listed CWE-276
Load more