Audiocodes c470hd Firmware vulnerabilities

2 CVEs affecting Audiocodes c470hd Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-22957, published 2023-08-11.

More from Audiocodes.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-22957, published 2023-08-11. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is…
• CVE-2023-22956, published 2023-08-11. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt encrypted configuration files and retrieve…