CVE-2017-18923: Beronet Voice Over Internet Protocol Gateways Firmware

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials.

Affected products

• Beronet Voice Over Internet Protocol Gateways Firmware: from 2.0.0, before 3.0.16 (fixed in 3.0.16)

Published 2020-07-29. Last modified 2026-06-17.