PT-2023-16200 · Akuvox · Akuvox E11

Published 2023-03-13 · Updated 2023-03-16 · CVE-2023-0348

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Akuvox E11 (affected versions not specified)

Description The issue concerns a lack of access control in the SIP servers of Akuvox E11, allowing an attacker to make direct SIP calls to any device within the system, potentially enabling them to contact any other device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-0348

Affected Products

Akuvox E11

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2023-0348 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-068-01 · Note