CVE-2022-24628: Audiocodes Device Manager Express

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is authenticated SQL injection in the id parameter of IPPhoneFirmwareEdit.php.

Affected products

• Audiocodes Device Manager Express: up to and including 7.8.20002.47752

Published 2023-05-29. Last modified 2026-06-17.