Audiocodes Device Manager Express
6 CVEs affecting Audiocodes Device Manager Express. Latest disclosed: 2023-05-29. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24629 | Critical | 9.8 | 2023-05-29 | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achieved via directory traversal in the dir… |
CVE-2022-24627 | Critical | 9.8 | 2023-05-29 | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the process_… |
CVE-2022-24630 | High | 7.2 | 2023-05-29 | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an ssh_command field… |
CVE-2022-24628 | High | 7.2 | 2023-05-29 | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is authenticated SQL injection in the id parameter of IPPhoneFirmwareE… |
CVE-2022-24631 | Medium | 5.4 | 2023-05-29 | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is stored XSS via the ajaxTenants.php desc parameter. |
CVE-2022-24632 | Medium | 5.3 | 2023-05-29 | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is directory traversal during file download via the BrowseFiles.php vi… |