Akuvox Sp-r50p Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Akuvox Sp-r50p Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-12324 — CVSS 7.2 (high): A command injection (missing input validation) issue in the IP address field for the logging server in the configuration web interface on…
• CVE-2019-12326 — CVSS 7.2 (high): Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a…
• CVE-2019-12327 — CVSS 7.2 (high): Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service…