CVE-2023-30024 | BDVDB-2026-201239 Detail

Description#

The MagicJack device, a VoIP solution for internet phone calls, contains a hidden NAND flash memory partition allowing unauthorized read/write access. Attackers can exploit this by replacing the original software with a malicious version, leading to ransomware deployment on the host computer. Affected devices have firmware versions prior to magicJack A921 USB Phone Jack Rev 3.0 V1.4.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-04-28Record published in the CVE List.
2. Version 22025-01-31Most recent update recorded in the CVE List.