PT-2023-16203 · Akuvox · Akuvox E11

Published 2023-03-13 · Updated 2023-03-16 · CVE-2023-0351

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Akuvox E11 (affected versions not specified)

Description The issue concerns command injection in the device phone-book contacts functionality of the Akuvox E11 web server backend library. This could allow an attacker to upload files with executable command instructions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2023-0351

Affected Products

Akuvox E11

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2023-0351 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-068-01 · Note