VulnerabilityAnalyzed
CVE-2023-22955
Thus, by knowing how to calculate and where to store the required checksums for the flasher tool, an attacker is able to store malicious firmware.
HIGH 7.8EPSS 0.31%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.31%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. The validation of firmware images only consists of simple checksum checks for different firmware components. Thus, by knowing how to calculate and where to store the required checksums for the flasher tool, an attacker is able to store malicious firmware.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.31% probability · 24th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-345
- Affected
- audiocodes/445hd firmware · audiocodes/405hd firmware · audiocodes/c450hd firmware
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/174214/AudioCodes-VoIP-Phones-Insufficient-Firmware-Validation.htmlThird Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2023/Aug/17Mailing List, Third Party Advisory
- https://syss.deNot Applicable
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-055.txtExploit, Vendor Advisory
- http://packetstormsecurity.com/files/174214/AudioCodes-VoIP-Phones-Insufficient-Firmware-Validation.htmlThird Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2023/Aug/17Mailing List, Third Party Advisory
- https://syss.deNot Applicable
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-055.txtExploit, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.