PT-2019-8744 · Audiocodes · Audiocodes Ip Phone 420Hd

Published 2019-03-17 · Updated 2020-08-24 · CVE-2018-10093

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AudioCodes IP phone 420HD version 2.2.12.126

Description The issue allows for Remote Code Execution on the affected devices.

Recommendations For version 2.2.12.126, update the firmware to a version that contains a fix for this issue.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2018-10093

Affected Products

Audiocodes Ip Phone 420Hd

References · 5

• 🔥 https://exploit-db.com/exploits/46164 · Exploit
• 🔥 http://packetstormsecurity.com/files/151116/AudioCode-400HD-Remote-Command-Injection.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2019/Jan/38 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-10093 · Security Note
• https://osv.dev/vulnerability/CVE-2018-10093 · Vendor Advisory