Audiocodes 405hd Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Audiocodes 405hd Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2018-16219 — CVSS 8.8 (high): A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the…
• CVE-2018-16216 — CVSS 8.0 (high): A command injection (missing input validation, escaping) in the monitoring or memory status web interface in AudioCodes 405HD (firmware…
• CVE-2023-22955 — CVSS 7.8 (high): An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. The validation of firmware images only consists of simple…
• CVE-2023-22956 — CVSS 7.5 (high): An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is…
• CVE-2023-22957 — CVSS 7.5 (high): An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key…
• CVE-2018-16220 — CVSS 6.1 (medium): Cross Site Scripting in different input fields (domain field and personal settings) in AudioCodes 405HD VoIP phone with firmware 2.2.12…