PT-2019-19452 · Audiocodes+1 · Audiocodes Mediant+1

Published 2019-07-19 · Updated 2020-08-24 · CVE-2019-9229

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AudioCodes Mediant devices versions F7.20A through F7.20A.251

Description An issue was discovered that allows attackers in the local network to access multiple quagga VTYs through an internal interface exposed to the link-local address 169.254.254.253. Attackers can authenticate with the default password that cannot be changed, and can execute malicious and unauthorized actions.

Recommendations For AudioCodes Mediant devices versions F7.20A through F7.20A.251, consider changing the default password to a unique and secure one, and restrict access to the internal interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2019-9229

Affected Products

Audiocodes Mediant

Quagga

References · 3

• https://osv.dev/vulnerability/CVE-2019-9229 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-9229 · Security Note
• https://cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf · Note