PT-2025-5979 · Audiocodes · Audiocodes Mediant Session Border Controller

Moritz Abrell · Published 2025-02-07 · Updated 2025-02-07 · CVE-2024-52884

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AudioCodes Mediant Session Border Controller (SBC) versions prior to 7.40A.501.841

Description An issue was discovered due to the use of weak password obfuscation/encryption. An attacker with access to configuration exports (INI) is able to decrypt the passwords.

Recommendations For versions prior to 7.40A.501.841, update to version 7.40A.501.841 or later to resolve the issue. As a temporary workaround, consider restricting access to configuration exports (INI) to minimize the risk of exploitation.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2024-52884

Affected Products

Audiocodes Mediant Session Border Controller

References · 7

• https://osv.dev/vulnerability/CVE-2024-52884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-52884 · Security Note
• https://twitter.com/CVEnew/status/1887891685335536080 · Twitter Post
• https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-078.txt · Note
• https://twitter.com/moritz_abrell/status/1887755495286390819 · Twitter Post
• https://audiocodes.com/solutions-products/products/session-border-controllers-sbcs · Note
• https://t.me/cvedetector/17504 · Telegram Post