CVE-2018-18567: Audiocodes 440hd Firmware

Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days.

AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business.

Affected products

• Audiocodes 440hd Firmware: up to and including 3.1.2.89
• Audiocodes 450hd Firmware: up to and including 3.1.2.89

Published 2018-10-24. Last modified 2026-06-17.