CVE-2019-12327: Akuvox SP-r50p Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service is running on port 2323; it cannot be turned off and the credentials cannot be changed.

Affected products

• Akuvox SP-r50p Firmware: version 50.0.6.156 only

Published 2019-07-22. Last modified 2026-06-17.